CWEweakness

CWE-689 Permission Race Condition During Resource Copy

Official page ↗
Abstraction
Compound
Structure
Composite
Status
Draft
Languages
C, Perl
CWE version
5.0

Description

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

Common consequences

• Confidentiality, Integrity: Read Application Data, Modify Application Data

Observed examples

• CVE-2002-0760: Archive extractor decompresses files with world-readable permissions, then later sets permissions to what the archive specified. • CVE-2005-2174: Product inserts a new object into database before setting the object's permissions, introducing a race condition. • CVE-2006-5214: Error file has weak permissions before a chmod is performed. • CVE-2005-2475: Archive permissions issue using hard link. • CVE-2003-0265: Database product creates files world-writable before initializing the setuid bits, leading to modification of executables.

Related

Attack pattern · CAPEC (2)

  • CAPEC-26 Leveraging Race Conditions attack pattern
  • CAPEC-27 Leveraging Race Conditions via Symbolic Links attack pattern

Observed example · CVE (5)

  • CVE-2006-5214 Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8… vulnerability
  • CVE-2005-2475 Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being… vulnerability
  • CVE-2005-2174 Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which… vulnerability
  • CVE-2003-0265 Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid… vulnerability
  • CVE-2002-0760 Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems,… vulnerability

Child of · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

Requires · CWE (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

Referenced by CAPEC · weakness (2)

  • CAPEC-26 Leveraging Race Conditions attack pattern
  • CAPEC-27 Leveraging Race Conditions via Symbolic Links attack pattern

Referenced by CVE · weakness (3)

  • CVE-2025-0087 In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. vulnerability
  • CVE-2025-40909 Perl threads have a working directory race condition where file operations may target unintended paths. vulnerability
  • CVE-2022-28768 The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation… vulnerability