7.6

CVE-2012-3292

The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Globus ≫ Globus Toolkit Version <= 5.2.1
Globus ≫ Globus Toolkit Version2.0
Globus ≫ Globus Toolkit Version2.2
Globus ≫ Globus Toolkit Version2.4.3
Globus ≫ Globus Toolkit Version3.0.2
Globus ≫ Globus Toolkit Version3.2.1
Globus ≫ Globus Toolkit Version4.0.0
Globus ≫ Globus Toolkit Version4.0.1
Globus ≫ Globus Toolkit Version4.0.2
Globus ≫ Globus Toolkit Version4.0.3
Globus ≫ Globus Toolkit Version4.0.4
Globus ≫ Globus Toolkit Version4.0.5
Globus ≫ Globus Toolkit Version4.0.6
Globus ≫ Globus Toolkit Version4.0.7
Globus ≫ Globus Toolkit Version4.0.8
Globus ≫ Globus Toolkit Version4.2.0
Globus ≫ Globus Toolkit Version4.2.1
Globus ≫ Globus Toolkit Version5.0.0
Globus ≫ Globus Toolkit Version5.0.1
Globus ≫ Globus Toolkit Version5.0.2
Globus ≫ Globus Toolkit Version5.0.3
Globus ≫ Globus Toolkit Version5.0.4
Globus ≫ Globus Toolkit Version5.0.5
Globus ≫ Globus Toolkit Version5.2.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.52% 0.84
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C