CVE-2006-4232

{"id": "CVE-2006-4232", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-08-18T20:04:00.000", "references": [{"url": "http://secunia.com/advisories/21516", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19549", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3290", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28408", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21516", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/19549", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/3290", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28408", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access."}, {"lang": "es", "value": "Condici\u00f3n de carrera en la herramienta grid-proxy-init en Globus Toolkit 3.2.x, 4.0.2, y 4.1.0 anterior al 15/08/2006 permite a usuarios locales robar informaci\u00f3n de credenciales reemplazando el archivo de credenciales del proxy entre la creaci\u00f3n del archivo y la comprobaci\u00f3n de acceso exclusivo al archivo."}], "lastModified": "2024-11-21T00:15:27.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:globus:globus_toolkit:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F72CDC1D-4CF8-4E8A-8A7F-1C41A21DAD92"}, {"criteria": "cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9E69418-82DA-49DD-BB34-8CD79C3BF80B"}, {"criteria": "cpe:2.3:a:globus:globus_toolkit:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FF249FE-99B9-45CC-B666-B59F2589DFC8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}