CVE-2006-4233 Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in t...
LowCVSS 3.6
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| globus toolkit | = 3.2.0 | No fix listed |
| globus toolkit | = 4.0.0 | No fix listed |
| globus toolkit | = 4.1.0 | No fix listed |
References
- 21516 exploit patch third-party-advisory
- [security-announce] 20060815 Temporary File Handling Vulnerability mailing-list patch
- 19549 patch vdb-entry
- ADV-2006-3290 vdb-entry
- globus-tmp-symlink(28410) vdb-entry