Globus Toolkit
Approved changes feed: RSS · Atom
cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*part: a version: 4.0.0 update: *
| Vendor | Globus (bfed999e-8f6d-5cb9-b97c-9b9fdb3da112) |
|---|---|
| Product | Globus Toolkit (0018afdc-5f88-5e23-bf5c-15bdd02defce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/globus/globus-toolkit |
purl2cpe | 2026-06-01 10:14:06.328599 |
pkg:rpm/opensuse/globus-toolkit |
purl2cpe | 2026-06-01 10:14:06.328601 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3292 |
vulnerable | 2026-06-08 05:02:08.976107 |
Details available
The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.
Published: 2012-06-07T20:00:00.000Z
Updated: 2024-08-06T19:57:50.522Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4233 |
vulnerable | 2026-06-08 04:49:11.287268 |
Details available
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.
Published: 2006-08-18T19:55:00.000Z
Updated: 2024-08-07T18:57:46.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4232 |
vulnerable | 2026-06-08 04:49:11.286298 |
Details available
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.
Published: 2006-08-18T19:55:00.000Z
Updated: 2024-08-07T18:57:46.493Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.