CAPEC 描述
An adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or destination web server terminate the TCP connection.
CAPEC 資訊
前置條件
An On/In Path Device相關弱點
| 弱點名稱 | |
|---|---|
CWE-940 |
Improper Verification of Source of a Communication Channel The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin. |
參考資料
REF-477
Inferring Mechanics of Web Censorship Around the WorldJohn-Paul Verkamp, Minaxi Gupta.
提交
| 名稱 | 機構 | 日期 | 發布日期 |
|---|---|---|---|
| Seamus Tuohy |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses |
