CWE-743 카테고리 상세 정보

CWE-743

CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO)
2008-11-24 +00:00
Obsolete
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO)

Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) chapter of the CERT C Secure Coding Standard (2008).

CWE 구성원 목록

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본

CWE-134: Use of Externally-Controlled Format String 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-241: Improper Handling of Unexpected Data Type 기본

CWE-276: Incorrect Default Permissions 기본

CWE-279: Incorrect Execution-Assigned Permissions 기본

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition 기본

CWE-37: Path Traversal: '/absolute/pathname/here' 기본

CWE-379: Creation of Temporary File in Directory with Insecure Permissions 기본

CWE-38: Path Traversal: '\absolute\pathname\here' 기본

CWE-39: Path Traversal: 'C:dirname' 기본

CWE-391: DEPRECATED: Unchecked Error Condition 기본

CWE-403: Exposure of File Descriptor to Unintended Control Sphere 기본

CWE-404: Improper Resource Shutdown or Release 기본

CWE-41: Improper Resolution of Path Equivalence 기본

CWE-552: Files or Directories Accessible to External Parties 기본

CWE-59: Improper Link Resolution Before File Access 기본

CWE-62: UNIX Hard Link 기본

CWE-64: Windows Shortcut Following (.LNK) 기본

CWE-65: Windows Hard Link 기본

CWE-67: Improper Handling of Windows Device Names 기본

CWE-675: Multiple Operations on Resource in Single-Operation Context 기본

CWE-676: Use of Potentially Dangerous Function 기본

CWE-686: Function Call With Incorrect Argument Type 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2008-11-24 +00:00 2008-11-24 +00:00 1.1

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2011-09-13 +00:00 updated Relationships
CWE Content Team MITRE 2017-11-08 +00:00 updated Description, Name, Relationship_Notes
CWE Content Team MITRE 2019-01-03 +00:00 updated Description, Name, References
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

참고 자료

REF-597

The CERT C Secure Coding Standard
Robert C. Seacord.

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.