logo       
Google Custom Search
    AddThis Social Bookmark Button

Re: FW: Security issue about CGI::Session: msg#00036

Subject: Re: FW: Security issue about CGI::Session
On Tuesday, March 21, 2006 2:17 PM -0600 Matt LeBlanc <mleblanc-a09SyBuiYrA@xxxxxxxxxxxxxxxx> wrote:

This is why the code now checks for symlinks prior to opening the file
for writing and attempts to delete the file and returns an error if
failing the deletion.

Don't you still have a window of vulnerability between the delete and create when a malicious local process could recreate the symlink?




-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642



Try Searching:
servers, voip, java, networking, microsoft ...
<Prev in Thread] Current Thread [Next in Thread>