Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2006-4233: Globus Toolkit lets local users steal certificates and replace files

CVE-2006-4233 · published 20 years ago

Summary

The Globus Toolkit versions 3.2.x, 4.0.x, and 4.1.0 (before the August 2006 update) allow anyone with access to the same server to read sensitive proxy certificates and write over any file they choose by tricking the system into using a symbolic link in the temporary folder. This could let an insider see authentication details or alter important configuration files. Upgrade to the patched version released after August 15, 2006, or apply the vendor's recommended fix to stop the symlink trick.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
globus	globus_toolkit	3.2.0 4.0.0 4.1.0 `cpe:2.3:a:globus:globus_toolkit:3.2.0:::::::*`

Original advisory text

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

3.6 Low

Exploitation

<1% chance of attack within 30 days

Timeline

Published18 Aug 2006

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2006-4233 · NVD

Track software like this

Free during beta