CWE-689 在资源拷贝时的权限竞争条件

Permission Race Condition During Resource Copy

结构: Composite

Abstraction: Compound

状态: Draft

被利用可能性: unkown

基本描述

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

相关缺陷

• cwe_Nature: Requires cwe_CWE_ID: 362 cwe_View_ID: 1000

• cwe_Nature: Requires cwe_CWE_ID: 732 cwe_View_ID: 1000

• cwe_Nature: ChildOf cwe_CWE_ID: 732 cwe_View_ID: 1000 cwe_Ordinal: Primary

适用平台

Language: [{'cwe_Name': 'C', 'cwe_Prevalence': 'Undetermined'}, {'cwe_Name': 'Perl', 'cwe_Prevalence': 'Undetermined'}]

常见的影响

范围	影响	注释
['Confidentiality', 'Integrity']	['Read Application Data', 'Modify Application Data']

分析过的案例

标识	说明	链接
CVE-2002-0760	Archive extractor decompresses files with world-readable permissions, then later sets permissions to what the archive specified.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0760
CVE-2005-2174	Product inserts a new object into database before setting the object's permissions, introducing a race condition.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2174
CVE-2006-5214	Error file has weak permissions before a chmod is performed.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5214
CVE-2005-2475	Archive permissions issue using hard link.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2475
CVE-2003-0265	Database product creates files world-writable before initializing the setuid bits, leading to modification of executables.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0265

Notes

相关攻击模式

• CAPEC-26
• CAPEC-27

引用

• REF-62 The Art of Software Security Assessment

文章来源于互联网:scap中文网