The gap between checking and using
A privileged program checks that a file is owned by the calling user, then opens it and writes.
An attacker replaces the file with a symbolic link to a system file between the two steps. What is this called?
A privileged program checks that a file is owned by the calling user, then opens it and writes.
An attacker replaces the file with a symbolic link to a system file between the two steps. What is this called?