low3.6
CVE-2006-4233
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via…
Impact
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Globus | Globus Toolkit | Versions 3.2.0, 4.0.0, 4.1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21516
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html
- http://www.securityfocus.com/bid/19549
- http://www.vupen.com/english/advisories/2006/3290
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28410
- http://secunia.com/advisories/21516
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html
- http://www.securityfocus.com/bid/19549
- http://www.vupen.com/english/advisories/2006/3290
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28410