CAPEC-5
Alert dla konkretnego CAPEC
Bądź na bieżąco z wszelkimi zmianami dotyczącymi konkretnego CAPEC.
Informacje CAPEC
Wymagania wstępne
System must use weak authentication mechanisms for administrative functions.Wymagane umiejętności
Given a vulnerable phone system, the attackers' technical vector relies on attacks that are well documented in cracker 'zines and have been around for decades.Wymagane zasoby
CCITT-5 or other vulnerable lines, with the ability to send tones such as combined 2,400 Hz and 2,600 Hz tones to the switchŁagodzenie
Implementation: Upgrade phone lines. Note this may be prohibitively expensiveUse strong access control such as two factor access control for administrative access to the switch
Powiązane słabości
| Nazwa słabości | |
|---|---|
CWE-285 |
Improper Authorization The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. |
Odniesienia
REF-1
Exploiting Software: How to Break CodeG. Hoglund, G. McGraw.
Zgłoszenie
| Nazwa | Organizacja | Data | Data wydania |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Modyfikacje
| Nazwa | Organizacja | Data | Komentarz |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses | |
| CAPEC Content Team | The MITRE Corporation | Updated @Status, Description |
