CVE-2006-4233: Globus Toolkit

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.

Affected products

• Globus Globus Toolkit: version 3.2.0 only; version 4.0.0 only; version 4.1.0 only

Published 2006-08-18. Last modified 2026-06-16.