CAPEC 描述
An adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or destination web server terminate the TCP connection.
CAPEC 信息
前提条件
An On/In Path Device相关弱点
| 弱点名称 | |
|---|---|
CWE-940 |
Improper Verification of Source of a Communication Channel The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin. |
参考资料
REF-477
Inferring Mechanics of Web Censorship Around the WorldJohn-Paul Verkamp, Minaxi Gupta.
提交记录
| 名称 | 组织 | 日期 | 发布日期 |
|---|---|---|---|
| Seamus Tuohy |
修改记录
| 名称 | 组织 | 日期 | 备注 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses |
