CVE-2011-0738: globus globus_toolkit Improper Input Validation
Vulnerability summary
CVE-2011-0738 is a medium (CVSS 4.3) Improper Input Validation vulnerability in globus globus_toolkit. EPSS estimates a 1.58% chance of exploitation in the next 30 days, higher than 75.2% of scored vulnerabilities.
Timeline
- 02-02-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.58%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
0.00 pp
From 1.58% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Globus1 product
- globus_toolkit5.0.0 | 5.0.1 | 5.0.2
Ncsa1 product
- myproxy5.0 | 5.1 | 5.2
2 vendors · 2 products
References
10 links- lists.fedoraproject.org/pipermail/package-announce/2011-January/053461.htmlVendor AdvisoryX Refsource FEDORA
- lists.globus.org/pipermail/security-announce/2011-January/000018.htmlMailing ListX Refsource MLISTPatch
- lists.fedoraproject.org/pipermail/package-announce/2011-January/053473.htmlVendor AdvisoryX Refsource FEDORA