alpine 3.6
race weakness #66

A race condition occurs within concurrent environments. It may be in the form of a function call, a small number of instructions, a series of program invocations and more.

5

Weakness Breakdown


Warning code(s):

This accepts filename arguments; if an attacker can move those files, a race condition results..

File Name:

./src/JohnTheRipper-1.8.0-jumbo-1/src/logger.c

Context:
if (chmod(path_expand(name), S_IRUSR | S_IWUSR))

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.