View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2012-3292 medium priority: Ubuntu including 2 source packages (globus-gridftp-server, globus-gridftp-server-control), 12 status rows across 6 suites (hardy, lucid, natty, oneiric, precise, upstream): released 10, DNE 2.
The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the last user in the password file.