Approved changes feed: RSS · Atom

cpe:2.3:a:globus:globus_toolkit:4.0.3:*:*:*:*:*:*:*

part: a version: 4.0.3 update: *

VendorGlobus (bfed999e-8f6d-5cb9-b97c-9b9fdb3da112)
ProductGlobus Toolkit (0018afdc-5f88-5e23-bf5c-15bdd02defce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/globus/globus-toolkit purl2cpe 2026-06-01 10:14:06.332169
pkg:rpm/opensuse/globus-toolkit purl2cpe 2026-06-01 10:14:06.332171

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3292 vulnerable 2026-06-08 05:02:08.978047 Details available
The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.
Published: 2012-06-07T20:00:00.000Z
Updated: 2024-08-06T19:57:50.522Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.