Search:

What is a Race Condition?

A race condition occurs when multiple processes access and manipulate the same data concurrently, and the outcome of the execution depends on the particular order in which the access takes place.

A race condition is of interest to a hacker when the race condition can be utilized to gain privileged system access.

Consider the following code snippet which illustrates a race condition:

if(access("/tmp/datafile",R_OK)==0){
fd=open("/tmp/datafile
process(fd);
close(fd);

This code creates the temporary file /tmp/datafile and then opens it.

The potential race condition occurs between the call to access() and the call to open().

If an attacker can replace the contents of /tmp/datafile between the access() and open() functions, he can manipulate the actions of the program which uses that datafile. This is the race.

It can be difficult to exploit a race condition, because you may have to "run the race" many times before you "win." You may have to run the vulnerable program and the vulnerability testing tool thousands of times before you get the expolit code to execute after the vulnerability opens and before the vulnerability closes. It is sometimes possible to give the attack an extra edge by using `nice` to lower the priority of the legitimate suid program.

Improper use of the function calls access(), chown(), chgrp(), chmod(), mktemp(), tempnam(), tmpfile(), and tmpnam() are the normal causes of a race condition.

Article Source: http://articleaddict.com

Barbara Jones writes on topics such as www.tech-faq.com/race-condition.shtml">Race Condition , www.tech-faq.com/format-string-vulnerability.shtml">Format String Vulnerability and www.tech-faq.com/integer-overflow.shtml">Interger Overflow for The Tech FAQ.

Please Rate this Article

Not yet Rated

Click the XML Icon Above to Receive Technology Articles Via RSS!

Additional Articles From - Home | Technology

Mobile Phones and Health Hazards - By : Ben Needles
Tcos- A Letter from a Game Lover - By : Zarf Rose
Add Items to the "Send To" Menu in Windows Vista - By : Shish
Zune Movie Site Comparisons - Getting the bang for your buck - By : Ben Needles
Why Simultaneous Interpretation Is So Impressive - By : Kelly Renaul
Choosing Your Cell Phone Service Plan - By : Ben Needles
No Love For VIdeo Game Voice Acting... - By : Ben Needles
Let your business grow with webinar services - By : Pooja Rai
Finding Used Video Game Systems Made Easy - By : Ben Needles
Nintendo Wii Accessories – Exciting Enhancements for the Exciting Console - By : Charles3 Gibson3

	Print This Article

	Add To Favorites
	Email to Friends
	Ezine Ready

Submit Articles
Member Login
Top Authors
Most Popular Articles
Submission Guidelines
Article RSS Feeds

New Stuff
About Us
Free Link Directory
Contact Us
Privacy Policy
Terms of Service
Sitemap