This attack targets a race condition occurring between the time of check (state) for a resource and the time of use of a resource. A typical example is file access. The adversary can leverage a file access race condition by \'running the race\', meaning that they would modify the resource between the first time the target program accesses the file and the time the target program uses the file. During that period of time, the adversary could replace or modify the file, causing the application to behave unexpectedly.
Description
Attack Execution Flow
3
1
Step 1
ExploreThe adversary explores to gauge what level of access they have.
AI Translation
L'avversario esplora per valutare quale livello di accesso possiede.
2
Step 2
ExperimentThe adversary confirms access to a resource on the target host. The adversary confirms ability to modify the targeted resource.
AI Translation
L'avversario conferma l'accesso a una risorsa sull'host di destinazione. L'avversario conferma la capacità di modificare la risorsa mirata.
3
Step 3
ExploitThe adversary decides to leverage the race condition by 'running the race', meaning that they would modify the resource between the first time the target program accesses the file and the time the target program uses the file. During that period of time, the adversary can replace the resource and cause an escalation of privilege.
AI Translation
L'avversario decide di sfruttare la condizione di race condition "correndo la gara", ovvero modificando la risorsa tra il primo accesso del programma target al file e il momento in cui il programma utilizza effettivamente il file. Durante quel periodo di tempo, l'avversario può sostituire la risorsa e causare un escalation dei privilegi.
Mitigations
5
Be Aware That Improper Use Of Access Function Calls Such As Chown(), Tempfile(), Chmod(), Etc. Can Cause A Race Condition.
Pay Attention To Concurrency Problems Related To The Access Of Resources.
Use Safe Libraries To Access Resources Such As Files.
Use Static Analysis Tools To Find Race Conditions.
Use Synchronization To Control The Flow Of Execution.
Consequences
Security Scopes Affected
Access Control
Authorization
Availability
Confidentiality
Integrity
Potential Impacts
Alter Execution Logic
Gain Privileges
Modify Data
Read Data
Resource Consumption