Subject: Re: mktemp() and directories
To: None <lukem@connect.com.au>
From: Todd C. Miller <Todd.Miller@courtesan.com>
List: tech-security
Date: 06/09/1997 10:02:00
In message <199706091153.VAA28885@shara.off.connect.com.au>
so spake Luke Mewburn (lukem):
> I've been asked about the implications of mktemp() for creating
> temporary directories. There was a concern that there may be
> exploitable race conditions.
You can still do a denial of service attack. You just have to
get in that window between the mktemp(3) and the mkdir(2).
Now, if you were to catch EEXIST and redo mktemp(3) a number
of times....
- todd