CWE-941 通信信道中错误指定的目的地
Incorrectly Specified Destination in a Communication Channel
结构: Simple
Abstraction: Base
状态: Incomplete
被利用可能性: unkown
基本描述
The software creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.
扩展描述
Attackers at the destination may be able to spoof trusted servers to steal data or cause a denial of service.
There are at least two distinct weaknesses that can cause the software to communicate with an unintended destination:
相关缺陷
-
cwe_Nature: ChildOf cwe_CWE_ID: 923 cwe_View_ID: 1000 cwe_Ordinal: Primary
-
cwe_Nature: ChildOf cwe_CWE_ID: 923 cwe_View_ID: 699 cwe_Ordinal: Primary
-
cwe_Nature: CanPrecede cwe_CWE_ID: 406 cwe_View_ID: 1000
适用平台
Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}
Paradigm: {'cwe_Name': 'Mobile', 'cwe_Prevalence': 'Undetermined'}
示例代码
例
This code listens on a port for DNS requests and sends the result to the requesting address.
bad Python
sock.bind( (UDP_IP,UDP_PORT) )
while true:
if not data:
(requestIP, nameToResolve) = parseUDPpacket(data)
record = resolveName(nameToResolve)
sendResponse(requestIP,record)
This code sends a DNS record to a requesting IP address. UDP allows the source IP address to be easily changed ('spoofed'), thus allowing an attacker to redirect responses to a target, which may be then be overwhelmed by the network traffic.
分析过的案例
| 标识 | 说明 | 链接 |
|---|---|---|
| CVE-2013-5211 | composite: NTP feature generates large responses (high amplification factor) with spoofed UDP source addresses. | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211 |
| CVE-1999-0513 | Classic "Smurf" attack, using spoofed ICMP packets to broadcast addresses. | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0513 |
| CVE-1999-1379 | DNS query with spoofed source address causes more traffic to be returned to spoofed address than was sent by the attacker. | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1379 |
Notes
引用
文章来源于互联网:scap中文网
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论