Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
BID:19549
CVE-2006-4232 | CVE-2006-4233 |Info
Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
| Bugtraq ID: | 19549 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 16 2006 12:00AM |
| Updated: | Aug 17 2006 05:10PM |
| Credit: | These issues were disclosed by Benjamin Bennett and Alex Lambert. |
| Vulnerable: |
Globus Globus Toolkit 4.0.1 Globus Globus Toolkit 3.2 |
| Not Vulnerable: |
Globus Globus Toolkit 4.0.2 Globus Globus Toolkit 3.2.1 |
Discussion
Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
Globus Toolkit is prone to vulnerabilities that may allow local attackers to create or overwrite arbitrary files with elevated privileges or to view sensitive information. These issues are due to a failure in the application to properly sanitize user-supplied input.
Globus Toolkit is prone to vulnerabilities that may allow local attackers to create or overwrite arbitrary files with elevated privileges or to view sensitive information. These issues are due to a failure in the application to properly sanitize user-supplied input.
Exploit / POC
Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
Attackers use standard system utilities to exploit these issues.
Attackers use standard system utilities to exploit these issues.
Solution / Fix
Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
Solution:
The vendor has released fixes to address these issues; please see the reference section for details.
Solution:
The vendor has released fixes to address these issues; please see the reference section for details.
References
Globus Toolkit Multiple Local Temporary File Handling Vulnerabilities
References:
References:
- Globus Toolkit Web Site (Globus)