CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3292

The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.025

EPSS Ranking 84.8%

CVSS Severity

CVSS v2 Score 7.6

References

Products affected by CVE-2012-3292

Globus » Globus Toolkit » Version: Any

cpe:2.3:a:globus:globus_toolkit:*
Globus » Globus Toolkit » Version: 2.0

cpe:2.3:a:globus:globus_toolkit:2.0
Globus » Globus Toolkit » Version: 2.2

cpe:2.3:a:globus:globus_toolkit:2.2
Globus » Globus Toolkit » Version: 2.4.3

cpe:2.3:a:globus:globus_toolkit:2.4.3
Globus » Globus Toolkit » Version: 3.0.2

cpe:2.3:a:globus:globus_toolkit:3.0.2
Globus » Globus Toolkit » Version: 3.2.1

cpe:2.3:a:globus:globus_toolkit:3.2.1
Globus » Globus Toolkit » Version: 4.0.0

cpe:2.3:a:globus:globus_toolkit:4.0.0
Globus » Globus Toolkit » Version: 4.0.1

cpe:2.3:a:globus:globus_toolkit:4.0.1
Globus » Globus Toolkit » Version: 4.0.2

cpe:2.3:a:globus:globus_toolkit:4.0.2
Globus » Globus Toolkit » Version: 4.0.3

cpe:2.3:a:globus:globus_toolkit:4.0.3
Globus » Globus Toolkit » Version: 4.0.4

cpe:2.3:a:globus:globus_toolkit:4.0.4
Globus » Globus Toolkit » Version: 4.0.5

cpe:2.3:a:globus:globus_toolkit:4.0.5
Globus » Globus Toolkit » Version: 4.0.6

cpe:2.3:a:globus:globus_toolkit:4.0.6
Globus » Globus Toolkit » Version: 4.0.7

cpe:2.3:a:globus:globus_toolkit:4.0.7
Globus » Globus Toolkit » Version: 4.0.8

cpe:2.3:a:globus:globus_toolkit:4.0.8
Globus » Globus Toolkit » Version: 4.2.0

cpe:2.3:a:globus:globus_toolkit:4.2.0
Globus » Globus Toolkit » Version: 4.2.1

cpe:2.3:a:globus:globus_toolkit:4.2.1
Globus » Globus Toolkit » Version: 5.0.0

cpe:2.3:a:globus:globus_toolkit:5.0.0
Globus » Globus Toolkit » Version: 5.0.1

cpe:2.3:a:globus:globus_toolkit:5.0.1
Globus » Globus Toolkit » Version: 5.0.2

cpe:2.3:a:globus:globus_toolkit:5.0.2
Globus » Globus Toolkit » Version: 5.0.3

cpe:2.3:a:globus:globus_toolkit:5.0.3
Globus » Globus Toolkit » Version: 5.0.4

cpe:2.3:a:globus:globus_toolkit:5.0.4
Globus » Globus Toolkit » Version: 5.0.5

cpe:2.3:a:globus:globus_toolkit:5.0.5
Globus » Globus Toolkit » Version: 5.2.0

cpe:2.3:a:globus:globus_toolkit:5.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3292

Products

Pricing

Contact Us