VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 2, 2011· Updated Jun 16, 2026

CVE-2011-0738

CVE-2011-0738

Description

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Globus/Toolkit3 versions
    cpe:2.3:a:globus:globus_toolkit:5.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:globus:globus_toolkit:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.2:*:*:*:*:*:*:*
  • Ncsa/Myproxy3 versions
    cpe:2.3:a:ncsa:myproxy:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ncsa:myproxy:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ncsa:myproxy:5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ncsa:myproxy:5.2:*:*:*:*:*:*:*
  • Globus Toolkit/MyProxyllm-create
    Range: 5.0 through 5.2
  • Globus Toolkit/Globus Toolkitllm-create
    Range: 5.0.0 through 5.0.2

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.