Skip to content

The gap between checking and using

A privileged program checks that a file is owned by the calling user, then opens it and writes.

An attacker replaces the file with a symbolic link to a system file between the two steps. What is this called?