Posted by
James in
Security on
06 15th, 2009 |
1 Comment
Example of a program that will check the file permissions, and then open the file. Between permission status check () call and open the file fopen () call an attacker can change the file opened by the name of another file with the original file name. To prevent this, fopen () file first, and then use the fstat (), which carry information file, not the file name. Since the file information always refer to a file opened with fopen (), although the name of the file and then change, then the fstat () akan akan check guaranteed rights of access to the same file. Many race...