Re: [Full-disclosure] AFFLIB(TM): Time-of-Check-Time-of-Use File Race
- From: Tim <tmorgan@xxxxxxxxxxxxx>
- Date: Sun, 29 Apr 2007 11:32:56 -0400
This specific vulnerability is not exploitable due to the referenced
code not being executed. I appologize for the misinformation.
Updates to each vulnerability can be found here:
http://www.vsecurity.com/bulletins/advisories/2007/afflib-toctou.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-overflows.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt
We are currently not aware of any additional exploitable flaws in AFFLIB.
tim
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- References:
- [Full-disclosure] AFFLIB(TM): Time-of-Check-Time-of-Use File Race
- From: VSR Advisories
- [Full-disclosure] AFFLIB(TM): Time-of-Check-Time-of-Use File Race
- Prev by Date: [Full-disclosure] [SECURITY] [DSA 1283-1] New php5 packages fix several vulnerabilities
- Next by Date: Re: [Full-disclosure] Spam is funny!
- Previous by thread: [Full-disclosure] AFFLIB(TM): Time-of-Check-Time-of-Use File Race
- Next by thread: [Full-disclosure] AFFLIB(TM): Multiple Shell Metacharacter Injections
- Index(es):
Relevant Pages
|
|
