-
Type: Bug
-
Resolution: Works as Designed
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Storage Engines
Time of check time of use
An attacker could change the filename's file association or other attributes between the check and use. A check occurs on a file's attributes before the file is used in a privileged operation, but things may have changed
/test/utility/file.c:184: TOCTOU 138211 Calling function "stat" to perform check on "path".
/test/utility/file.c:198: TOCTOU 138211 Calling function "opendir" that uses "path" after a check function. This can cause a time-of-check, time-of-use race condition.