Approved changes feed: RSS · Atom

cpe:2.3:a:globus:globus_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGlobus (bfed999e-8f6d-5cb9-b97c-9b9fdb3da112)
ProductGlobus Toolkit (0018afdc-5f88-5e23-bf5c-15bdd02defce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/globus/globus-toolkit purl2cpe 2026-06-01 10:14:06.320363
pkg:rpm/opensuse/globus-toolkit purl2cpe 2026-06-01 10:14:06.320365

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3292 vulnerable 2026-06-08 05:02:08.971626 Details available
The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.
Published: 2012-06-07T20:00:00.000Z
Updated: 2024-08-06T19:57:50.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2784 vulnerable 2026-06-08 04:49:45.996135 Details available
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allows remote attackers to cause a denial of service (resource exhaustion and system crash) via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications.
Published: 2007-05-21T23:00:00.000Z
Updated: 2024-08-07T13:49:57.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.