사전 조건
The attacker must be able to place the malicious binary on the target machine.
완화 방법
Insure that binaries commonly used by the system have the correct file permissions. Set operating system policies that restrict privilege elevation of non-Administrators. Use auditing tools to observe changes to system services.
관련 약점
| CWE-ID |
약점 이름 |
|
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. |
제출
| 이름 |
조직 |
날짜 |
출시일 |
| CAPEC Content Team |
The MITRE Corporation |
2018-05-31 +00:00 |
|
수정 사항
| 이름 |
조직 |
날짜 |
댓글 |
| CAPEC Content Team |
The MITRE Corporation |
2019-04-04 +00:00 |
Updated Example_Instances, Taxonomy_Mappings |
| CAPEC Content Team |
The MITRE Corporation |
2020-07-30 +00:00 |
Updated Taxonomy_Mappings |
| CAPEC Content Team |
The MITRE Corporation |
2020-12-17 +00:00 |
Updated Taxonomy_Mappings |
| CAPEC Content Team |
The MITRE Corporation |
2022-09-29 +00:00 |
Updated Taxonomy_Mappings |
