CWE-734 뷰 상세 정보

CWE-734

Weaknesses Addressed by the CERT C Secure Coding Standard (2008)
2008-11-24 +00:00
Obsolete
Graph
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: Weaknesses Addressed by the CERT C Secure Coding Standard (2008)

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the book "The CERT C Secure Coding Standard" published in 2008. This view is considered obsolete, as a newer version of the coding standard is available. This view statically represents the coding rules as they were in 2008.

CWE 구성원

CWE-743: Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) chapter of the CERT C Secure Coding Standard (2008).
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본
CWE-134: Use of Externally-Controlled Format String 기본
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본
CWE-241: Improper Handling of Unexpected Data Type 기본
CWE-276: Incorrect Default Permissions 기본
CWE-279: Incorrect Execution-Assigned Permissions 기본
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition 기본
CWE-37: Path Traversal: '/absolute/pathname/here' 기본
CWE-379: Creation of Temporary File in Directory with Insecure Permissions 기본
CWE-38: Path Traversal: '\absolute\pathname\here' 기본
CWE-39: Path Traversal: 'C:dirname' 기본
CWE-391: DEPRECATED: Unchecked Error Condition 기본
CWE-403: Exposure of File Descriptor to Unintended Control Sphere 기본
CWE-404: Improper Resource Shutdown or Release 기본
CWE-41: Improper Resolution of Path Equivalence 기본
CWE-552: Files or Directories Accessible to External Parties 기본
CWE-59: Improper Link Resolution Before File Access 기본
CWE-62: UNIX Hard Link 기본
CWE-64: Windows Shortcut Following (.LNK) 기본
CWE-65: Windows Hard Link 기본
CWE-67: Improper Handling of Windows Device Names 기본
CWE-675: Multiple Operations on Resource in Single-Operation Context 기본
CWE-676: Use of Potentially Dangerous Function 기본
CWE-686: Function Call With Incorrect Argument Type 기본
CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.

대상

이해관계자 설명
Software Developers By following the CERT C Secure Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers If a software developer claims to be following the CERT C Secure Coding standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2008-11-24 +00:00 2008-11-24 +00:00 1.1

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2017-11-08 +00:00 updated Description, Maintenance_Notes, Name, References
CWE Content Team MITRE 2019-01-03 +00:00 updated Description, Name, References
CWE Content Team MITRE 2020-02-24 +00:00 updated View_Audience
CWE Content Team MITRE 2021-03-15 +00:00 updated Description, Maintenance_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

참고 자료

REF-597

The CERT C Secure Coding Standard
Robert C. Seacord.

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.