CVE-2006-4232 Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file...
LowCVSS 1.2
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| globus toolkit | = 3.2.0 | No fix listed |
| globus toolkit | = 4.0.0 | No fix listed |
| globus toolkit | = 4.1.0 | No fix listed |
References
- 21516 patch third-party-advisory vendor-advisory
- [security-announce] 20060815 Proxy Generation Tool Vulnerability mailing-list patch
- 19549 patch vdb-entry
- ADV-2006-3290 vdb-entry
- globus-grid-proxy-race-condition(28408) vdb-entry