CVE-2006-4233
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created…
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.27% probability · 20th percentile
- CISA KEV
- Not listed
- Affected
- globus/globus toolkit
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21516Exploit, Patch
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.htmlPatch
- http://www.securityfocus.com/bid/19549Patch
- http://www.vupen.com/english/advisories/2006/3290
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28410
- http://secunia.com/advisories/21516Exploit, Patch
- http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.htmlPatch
- http://www.securityfocus.com/bid/19549Patch
- http://www.vupen.com/english/advisories/2006/3290
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28410
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.