CERT C++ Secure Coding Section 09 - Input Output (FIO)

Opis

Weaknesses in this category are related to rules in the Input Output (FIO) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

Wpisy w tej grupie

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-134 Use of Externally-Controlled Format String
• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CWE-241 Improper Handling of Unexpected Data Type
• CWE-276 Incorrect Default Permissions
• CWE-279 Incorrect Execution-Assigned Permissions
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
• CWE-37 Path Traversal: '/absolute/pathname/here'
• CWE-379 Creation of Temporary File in Directory with Insecure Permissions
• CWE-38 Path Traversal: '\absolute\pathname\here'
• CWE-39 Path Traversal: 'C:dirname'
• CWE-391 Unchecked Error Condition
• CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
• CWE-404 Improper Resource Shutdown or Release
• CWE-41 Improper Resolution of Path Equivalence
• CWE-552 Files or Directories Accessible to External Parties
• CWE-59 Improper Link Resolution Before File Access ('Link Following')
• CWE-62 UNIX Hard Link
• CWE-64 Windows Shortcut Following (.LNK)
• CWE-65 Windows Hard Link
• CWE-67 Improper Handling of Windows Device Names
• CWE-675 Multiple Operations on Resource in Single-Operation Context
• CWE-676 Use of Potentially Dangerous Function
• CWE-73 External Control of File Name or Path
• CWE-732 Incorrect Permission Assignment for Critical Resource
• CWE-770 Allocation of Resources Without Limits or Throttling

Źródła