Re: AFFLIB(TM): Time-of-Check-Time-of-Use File Race

[Tim <tmorgan () vsecurity com>]

This specific vulnerability is not exploitable due to the referenced
code not being executed.  I appologize for the misinformation.

Updates to each vulnerability can be found here:

http://www.vsecurity.com/bulletins/advisories/2007/afflib-toctou.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-overflows.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt
http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt

We are currently not aware of any additional exploitable flaws in AFFLIB.

tim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/