oss-sec mailing list archives

Re: Request for CVE Identifier: bzexe insecure temporary file

From: vladz <vladz () devzero fr>
Date: Sun, 6 Nov 2011 17:49:32 +0100


Hi,

Here is a PoC for this race condition.  It uses the Inotify API and
always succeed on my Dual-core CPU.  

  http://vladz.devzero.fr/other/bzexe_PoC.c.html

Regards,
-- 
http://vladz.devzero.fr
PGP key 8F7E2D3C from pgp.mit.edu

Current thread:

Request for CVE Identifier: bzexe insecure temporary file Ramon de C Valle (Oct 28)
- Re: Request for CVE Identifier: bzexe insecure temporary file Hanno Böck (Oct 28)
  - Re: Request for CVE Identifier: bzexe insecure temporary file Ramon de C Valle (Oct 28)
  - Re: Request for CVE Identifier: bzexe insecure temporary file Benjamin Renaut (Oct 28)
  - Re: Request for CVE Identifier: bzexe insecure temporary file vladz (Oct 28)
    - Re: Request for CVE Identifier: bzexe insecure temporary file Kurt Seifried (Oct 28)
- Re: Request for CVE Identifier: bzexe insecure temporary file vladz (Nov 06)