|
|
|
|
CWE-239: Failure to Handle Incomplete Element| | Failure to Handle Incomplete Element |
|
| Weakness ID: 239 (Weakness Base) | | Status: Draft |
 Description
Description Summary The software does not properly handle when a particular element is not completely specified.
Time of Introduction
- Architecture and Design
- Implementation
Common Consequences | Scope | Effect |
|---|
Integrity Other | Technical Impact: Varies by context; Unexpected state |
Observed Examples | Reference | Description |
|---|
| CVE-2002-1532 | HTTP GET without \r\n\r\n CRLF sequences causes
product to wait indefinitely and prevents other users from accessing
it. |
| CVE-2003-0195 | Partial request is not timed
out. |
| CVE-2005-2526 | MFV. CPU exhaustion in printer via partial
printing request then early termination of
connection. |
| CVE-2002-1906 | CPU consumption by sending incomplete HTTP
requests and leaving the connections open. |
Relationships Taxonomy Mappings | Mapped Taxonomy Name | Node ID | Fit | Mapped Node Name |
|---|
| PLOVER | | | Incomplete Element |
Content History | Submissions |
|---|
| Submission Date | Submitter | Organization | Source |
|---|
| PLOVER | | Externally Mined | | | Modifications |
|---|
| Modification Date | Modifier | Organization | Source |
|---|
| 2008-07-01 | Eric Dalci | Cigital | External | | updated Time_of_Introduction | | 2008-09-08 | CWE Content Team | MITRE | Internal | | updated Relationships, Observed_Example,
Taxonomy_Mappings | | 2009-10-29 | CWE Content Team | MITRE | Internal | | updated Description | | 2011-06-01 | CWE Content Team | MITRE | Internal | | updated Common_Consequences | | 2011-06-27 | CWE Content Team | MITRE | Internal | | updated Common_Consequences | | Previous Entry Names |
|---|
| Change Date | Previous Entry
Name |
|---|
| 2008-04-11 | Incomplete
Element | |
|
