CAPEC-200 詳細資料

CAPEC-200

Removal of filters: Input filters, output filters, data masking
2014-06-23
00h00 +00:00
中危
Draft
2022-02-22
00h00 +00:00
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
管理通知

CAPEC 描述

An attacker removes or disables filtering mechanisms on the target application. Input filters prevent invalid data from being sent to an application (for example, overly large inputs that might cause a buffer overflow or other malformed inputs that may not be correctly handled by an application). Input filters might also be designed to constrained executable content.

CAPEC 資訊

前置條件

The target application must utilize some sort of filtering mechanism (input, output, or data masking).

所需資源

None: No specialized resources are required to execute this type of attack.

提交

名稱 機構 日期 發布日期
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

修改記錄

名稱 機構 日期 備註
CAPEC Content Team The MITRE Corporation 2015-12-07 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2017-08-04 +00:00 Updated Resources_Required
CAPEC Content Team The MITRE Corporation 2022-02-22 +00:00 Updated Description, Extended_Description