[SECURITY] Fedora 17 Update: globus-gridftp-server-6.10-2.fc17

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

[SECURITY] Fedora 16 Update: globus-gridftp-server-control-2.5-2.fc16

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

[SECURITY] Fedora 16 Update: globus-gridftp-server-6.10-2.fc16

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

[SECURITY] Fedora 15 Update: globus-gridftp-server-6.10-2.fc15

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

[SECURITY] Fedora 15 Update: globus-gridftp-server-control-2.5-2.fc15

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

CVE-2011-0738

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

Design/Logic Flaw

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

CVE-2011-0738

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

CVE-2011-0738

CVE-2011-0738 affects MyProxy 5.0–5.2 (used in Globus Toolkit 5.0.0–5.0.2). The vulnerability is a failure to properly verify the myproxy-server certificate’s hostname/identity in X.509, enabling remote attackers to spoof the server and perform MITM via a crafted certificate when running myproxy-...

Callisto <= 1.1.5 pl5 SQL Injection / Credentials Disclosure Exploit

Exploit for php platform in category web applications ==================================================================== Callisto = 1.1.5 pl5 SQL Injection / Credentials Disclosure Exploit ==================================================================== ?php Exploit Title: Callisto = 1.1.5...

phpBB modified by Przemo <= 1.12.6p4 Denial Of Service Exploit

Exploit for php platform in category dos / poc ============================================================== phpBB modified by Przemo = 1.12.6p4 Denial Of Service Exploit ============================================================== ?php Exploit Title: phpBB modified by Przemo = 1.12.6p4 Denial...

PHP-Fusion v7.00.07 Core PL Full Path Disclosure

Exploit for php platform in category web applications ================================================ PHP-Fusion v7.00.07 Core PL Full Path Disclosure ================================================ Exploit Title: PHP-Fusion v7.00.07 Core PL Full Path Disclosure Software PHP-Fusion v7.00.07 Cor...

FreeBSD Ports: globus

The remote host is missing an update to the system as announced in the referenced advisory. VID 5039ae61-2c9f-11db-8401-000ae42e9b93 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: globus

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unfixed XSS vulnerability at www.globusjourneys.ca

Security researcher xylitol, has submitted on 07/10/2008 a cross-site-scripting XSS vulnerability affecting www.globusjourneys.ca, which at the time of submission ranked 3676767 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

Code injection

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

CVE-2007-2784

CVE-2007-2784 describes an unspecified vulnerability in the globus-job-manager component of the Globus Toolkit 4.1.1 and earlier (also affecting globus_nexus-6.6 and earlier ). The issue allows remote attackers to cause a denial of service through certain requests to temporary TCP ports used by a...

FreeBSD : globus -- Multiple tmpfile races (5039ae61-2c9f-11db-8401-000ae42e9b93)

The Globus Alliance reports : The proxy generation tool grid-proxy-init creates the file, secures the file to provide access only to owner and writes proxy to the file. A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The chec...