qpid-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aidan Skinner (JIRA)" <qpid-...@incubator.apache.org>
Subject [jira] Assigned: (QPID-1563) AMQUserManagementMBean contains filesystem race condition
Date Fri, 09 Jan 2009 12:03:59 GMT

     [ https://issues.apache.org/jira/browse/QPID-1563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Aidan Skinner reassigned QPID-1563:
-----------------------------------

    Assignee: Rob Godfrey  (was: Aidan Skinner)

Please review

> AMQUserManagementMBean contains filesystem race condition
> ---------------------------------------------------------
>
>                 Key: QPID-1563
>                 URL: https://issues.apache.org/jira/browse/QPID-1563
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>            Reporter: Aidan Skinner
>            Assignee: Rob Godfrey
>
> saveAccessFile contains a classic temp file race condition which would concievably let
a user with write permission to the configuration directory write or delete arbitary files
as the broker by creating a symlink.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message