Questions tagged [race-condition]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
165 views

Understanding the Meltdown vulnerability

I need to write a simple program that demonstrates a race condition. I picked the Meltdown vulnerability. I want to clarify something. I'm following this explanation https://resources.infosecinstitute....
user avatar
2 votes
0 answers
219 views

What is the impact if there is Race Condition while submitting OTP?

I recently came across a web application where it was asking for an OTP after a successful login. Let the endpoint be https://www.example.com/otpcode The initial test for a brute-force of the OTP ...
user avatar
0 votes
2 answers
122 views

Update fresh installation of Linux OS

It seems to me that there's some sort of "race condition" when you install a new Linux OS (this applies to every OS, but I'll restrict this question to Linux only). When you download the OS for a ...
user avatar
  • 15.3k
1 vote
0 answers
75 views

Access default to true vulnerability

I remember there is a TOCTOU-related vulnerability, where one should never default the access of a user to true and set to false if something goes wrong, but default it to false and set it to true ...
user avatar
42 votes
8 answers
19k views

Exploiting the delay when a festival ticket is scanned

How a ticket system works A ticket system - one you see at festivals - works like this: when a user pays for their ticket, a row is added to the database with a column named is_scanned, whose default ...
user avatar
  • 2,740
1 vote
1 answer
407 views

What is the race condition in the Heartbleed attack?

A race condition occurs when two or more threads access shared data and try to do so at the same time. The Heartbleed attack is a vulnerability in OpenSSL, where a Client sends heartbeat requests to ...
user avatar
2 votes
1 answer
124 views

Is Amazon's app store vulnerable to external storage race condition?

There's been a load of kerfuffle about how Fortnite on Android saves APKs to external storage and how they can be overwritten before they are installed. (The press is awkwardly calling this a man-in-...
user avatar
  • 121
10 votes
2 answers
839 views

Are memcpy() based race conditions exploitable for causing remote code execution?

Let’s say I have the following pseudocode in the trusted part of a sandbox which prevent untrusted code calling mprotect() and mmap() and ptrace() directly (mutext isn’t accessible from sandboxed ...
user avatar
  • 1,402
1 vote
1 answer
339 views

Pentest software with a race condition

I have to pentest a program "xchgpass" that acts like passwd. This "xchgpass" edits a file located at /etc/secretpass . xchgpass has setuid bit set : hacker@cours-info:~$ ls -l /usr/bin/xchgpass -...
user avatar
1 vote
2 answers
693 views

Is it possible to plan for race conditions?

Is it possible to plan for race conditions, so that you can execute specific commands at a specific time? For example, the following code is vulnerable to a race condition. Is it possible to modify ...
user avatar
1 vote
2 answers
2k views

Code Vulnerability in Shell script

I was given an assignment for my Computer Security class. We we were given a piece of code to analyze and determine the vulnerabilities that it might have. #!/bin/sh # shell script to create a copy ...
user avatar
  • 13
9 votes
1 answer
3k views

Is symlink race a very common vulnerability in UNIX systems

As far as I know, when I am creating a new file or directory in a directory that can be written by multiple users (and thus an adversary can have made a symlink there), the only way to protect myself ...
user avatar
  • 609
7 votes
1 answer
702 views

How to solve race condition in 2-factor authentication solutions like RSA Security tokens or Google Authenticator?

One of the reasons we opt to use 2-factor authentication is to minimize the impact of keyloggers. The theory is that even if an attacker is able to observe the user type in the token numbers, they ...
user avatar
  • 6,118
16 votes
2 answers
2k views

How can I test my web application for timing attacks?

race conditions, etc. Are there automatic tools for this? What manual techniques should I use? From the Area51 proposal
user avatar
  • 71.8k