FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4232

This CVE name corresponds to:

Entered Topic
2006-08-15 globus -- Multiple tmpfile races

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-4232
Phase Assigned(20060818)

Description

Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.

References

Source Reference
MLIST [security-announce] 20060815 Proxy Generation Tool Vulnerability
BID 19549
VUPEN ADV-2006-3290
SECUNIA 21516
XF globus-grid-proxy-race-condition(28408)