CAPEC-596
TCP RST Injection
2017-01-03
00h00 +00:00
00h00 +00:00
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Deskripsi CAPEC
An adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or destination web server terminate the TCP connection.
Informasi CAPEC
Prasyarat
An On/In Path DeviceKelemahan Terkait
| Nama Kelemahan | |
|---|---|
CWE-940 |
Improper Verification of Source of a Communication Channel The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin. |
Referensi
REF-477
Inferring Mechanics of Web Censorship Around the WorldJohn-Paul Verkamp, Minaxi Gupta.
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis |
|---|---|---|---|
| Seamus Tuohy |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses |
