Fixing races for fun and profit: how to abuse atime (2005)
Cached
Download Links
| Venue: | In 14th USENIX Security Symp |
| Citations: | 11 - 4 self |
BibTeX
@INPROCEEDINGS{Borisov05fixingraces,
author = {Nikita Borisov and Rob Johnson and Naveen Sastry and David Wagner},
title = {Fixing races for fun and profit: how to abuse atime},
booktitle = {In 14th USENIX Security Symp},
year = {2005},
pages = {303--314}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Dean and Hu proposed a probabilistic countermeasure to the classic access(2)/open(2) TOCTTOU race condition in privileged Unix programs [4]. In this paper, we describe an attack that succeeds with very high probability against their countermeasure. We then consider a stronger randomized variant of their defense and show that it, too, is broken. We conclude that access(2) must never be used in privileged Unix programs. The tools we develop can be used to attack other filesystem races, underscoring the importance of avoiding such races in secure software. 1
