CVE-2006-4232

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-18 · updated 2026-06-16

Description

Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.

Affected products

Globus Toolkit: 3.2.0, 4.0.0, 4.1.0

References

http://secunia.com/advisories/21516
http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html
http://www.securityfocus.com/bid/19549
http://www.vupen.com/english/advisories/2006/3290
https://exchange.xforce.ibmcloud.com/vulnerabilities/28408
http://secunia.com/advisories/21516
http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html
http://www.securityfocus.com/bid/19549
http://www.vupen.com/english/advisories/2006/3290
https://exchange.xforce.ibmcloud.com/vulnerabilities/28408

Get alerted when CVE-2006-4232 or the next vulnerability affects your stack