Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CWE CATEGORY:CERT C++ Secure Coding Section 09 - Input Output (FIO)
Category ID:877
Vulnerability Mapping:Prohibited
Status:Incomplete
DetailsContent HistoryObserved CVE ExamplesReports
▼Summary

Weaknesses in this category are related to rules in the Input Output (FIO) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

▼Membership
NatureMappingTypeIDName
MemberOfProhibitedV868Weaknesses Addressed by the SEI CERT C++ Coding Standard (2016 Version)
HasMemberAllowedB241Improper Handling of Unexpected Data Type
HasMemberDiscouragedC119Improper Restriction of Operations within the Bounds of a Memory Buffer
HasMemberAllowedB134Use of Externally-Controlled Format String
HasMemberAllowedB22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
HasMemberAllowedB276Incorrect Default Permissions
HasMemberAllowedV279Incorrect Execution-Assigned Permissions
HasMemberAllowed-with-ReviewC362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
HasMemberAllowedB367Time-of-check Time-of-use (TOCTOU) Race Condition
HasMemberAllowedV37Path Traversal: '/absolute/pathname/here'
HasMemberAllowedB379Creation of Temporary File in Directory with Insecure Permissions
HasMemberAllowedV38Path Traversal: '\absolute\pathname\here'
HasMemberAllowedV39Path Traversal: 'C:dirname'
HasMemberProhibitedB391Unchecked Error Condition
HasMemberAllowedB403Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
HasMemberAllowed-with-ReviewC404Improper Resource Shutdown or Release
HasMemberAllowedB41Improper Resolution of Path Equivalence
HasMemberAllowedB552Files or Directories Accessible to External Parties
HasMemberAllowedB59Improper Link Resolution Before File Access ('Link Following')
HasMemberAllowedV62UNIX Hard Link
HasMemberAllowedV64Windows Shortcut Following (.LNK)
HasMemberAllowedV65Windows Hard Link
HasMemberAllowedV67Improper Handling of Windows Device Names
HasMemberAllowed-with-ReviewC675Multiple Operations on Resource in Single-Operation Context
HasMemberAllowedB676Use of Potentially Dangerous Function
HasMemberAllowedB73External Control of File Name or Path
HasMemberAllowed-with-ReviewC732Incorrect Permission Assignment for Critical Resource
HasMemberAllowedB770Allocation of Resources Without Limits or Throttling
Nature: MemberOf
Mapping: Prohibited
Type: View
ID: 868
Name: Weaknesses Addressed by the SEI CERT C++ Coding Standard (2016 Version)
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 241
Name: Improper Handling of Unexpected Data Type
Nature: HasMember
Mapping: Discouraged
Type: Class
ID: 119
Name: Improper Restriction of Operations within the Bounds of a Memory Buffer
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 134
Name: Use of Externally-Controlled Format String
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 22
Name: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 276
Name: Incorrect Default Permissions
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 279
Name: Incorrect Execution-Assigned Permissions
Nature: HasMember
Mapping: Allowed-with-Review
Type: Class
ID: 362
Name: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 367
Name: Time-of-check Time-of-use (TOCTOU) Race Condition
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 37
Name: Path Traversal: '/absolute/pathname/here'
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 379
Name: Creation of Temporary File in Directory with Insecure Permissions
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 38
Name: Path Traversal: '\absolute\pathname\here'
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 39
Name: Path Traversal: 'C:dirname'
Nature: HasMember
Mapping: Prohibited
Type: Base
ID: 391
Name: Unchecked Error Condition
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 403
Name: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
Nature: HasMember
Mapping: Allowed-with-Review
Type: Class
ID: 404
Name: Improper Resource Shutdown or Release
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 41
Name: Improper Resolution of Path Equivalence
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 552
Name: Files or Directories Accessible to External Parties
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 59
Name: Improper Link Resolution Before File Access ('Link Following')
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 62
Name: UNIX Hard Link
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 64
Name: Windows Shortcut Following (.LNK)
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 65
Name: Windows Hard Link
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 67
Name: Improper Handling of Windows Device Names
Nature: HasMember
Mapping: Allowed-with-Review
Type: Class
ID: 675
Name: Multiple Operations on Resource in Single-Operation Context
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 676
Name: Use of Potentially Dangerous Function
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 73
Name: External Control of File Name or Path
Nature: HasMember
Mapping: Allowed-with-Review
Type: Class
ID: 732
Name: Incorrect Permission Assignment for Critical Resource
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 770
Name: Allocation of Resources Without Limits or Throttling
▼Vulnerability Mapping Notes
Usage:Prohibited
Reason:
Rationale:

This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.

Comments:

See member weaknesses of this category.

▼Notes
▼Taxonomy Mappings
Taxonomy NameEntry IDFitEntry Name
▼References
Reference ID: REF-856
Title: 09. Input Output (FIO)
Version: v4.15
Author: CERT
Publication:
Publisher:
Edition:
URL:https://www.securecoding.cert.org/confluence/display/cplusplus/09.+Input+Output+%28FIO%29
URL Date:
Day:N/A
Month:N/A
Year:N/A
Details not found