VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2012· Updated Apr 29, 2026

CVE-2012-3292

CVE-2012-3292

Description

The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.

Affected products

24
  • Globus/Globus Toolkit24 versions
    cpe:2.3:a:globus:globus_toolkit:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:globus:globus_toolkit:*:*:*:*:*:*:*:*range: <=5.2.1
    • cpe:2.3:a:globus:globus_toolkit:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:globus:globus_toolkit:5.2.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.