CWE-689 在资源拷贝时的权限竞争条件

Permission Race Condition During Resource Copy

结构: Composite

Abstraction: Compound

状态: Draft

被利用可能性: unkown

基本描述

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

相关缺陷

  • cwe_Nature: Requires cwe_CWE_ID: 362 cwe_View_ID: 1000

  • cwe_Nature: Requires cwe_CWE_ID: 732 cwe_View_ID: 1000

  • cwe_Nature: ChildOf cwe_CWE_ID: 732 cwe_View_ID: 1000 cwe_Ordinal: Primary

适用平台

Language: [{'cwe_Name': 'C', 'cwe_Prevalence': 'Undetermined'}, {'cwe_Name': 'Perl', 'cwe_Prevalence': 'Undetermined'}]

常见的影响

范围 影响 注释
['Confidentiality', 'Integrity'] ['Read Application Data', 'Modify Application Data']

分析过的案例

标识 说明 链接
CVE-2002-0760 Archive extractor decompresses files with world-readable permissions, then later sets permissions to what the archive specified. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0760
CVE-2005-2174 Product inserts a new object into database before setting the object's permissions, introducing a race condition. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2174
CVE-2006-5214 Error file has weak permissions before a chmod is performed. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5214
CVE-2005-2475 Archive permissions issue using hard link. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2475
CVE-2003-0265 Database product creates files world-writable before initializing the setuid bits, leading to modification of executables. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0265

Notes

相关攻击模式

  • CAPEC-26
  • CAPEC-27

引用