|
|
|
|
CWE-271 Individual Dictionary Definition (Draft 9)
Weakness ID
| Status: Incomplete 271 (Weakness Class) | | Description | Summary In some contexts, a system executing with elevated permissions will hand off a
process/file/etc. to another process/user. If the privileges of an entity are not reduced, then
elevated privileges are spread throughout a system and possibly to an attacker. | | Likelihood of Exploit | High | | Weakness Ordinality | Primary (Weakness exists independent of other weaknesses) | | Causal Nature | Explicit (This is an explicit weakness resulting from behavior of the developer) | | Potential Mitigations | Design: Ensure that appropriate compartmentalization is built into the system design
and that the compartmentalization serves to allow for and further reinforce privilege
separation functionality. Architects and designers should rely on the principle of least
privilege to decide when it is appropriate to use and to drop system privileges. Very carefully manage the setting, management and handling of privileges. Explicitly
manage trust zones in the software. Consider following the principle of separation of privilege. Require multiple
conditions to be met before permitting access to a system resource. | | Observed Examples | | Reference | Description |
|---|
| CVE-2000-1213 | Program does not drop privileges after acquiring the raw socket. | | CVE-2001-0559 | Setuid program does not drop privileges after a parsing error occurs, then calls
another program to handle the error. | | CVE-2001-0787 | Does not drop privileges in related groups when lowering privileges. | | CVE-2002-0080 | Does not drop privileges in related groups when lowering privileges. | | CVE-2001-1029 | Does not drop privileges before determining access to certain files. | | CVE-1999-0813 | Finger daemon does not drop privileges when executing programs on behalf of the user
being fingered. | | CVE-1999-1326 | FTP server does not drop privileges if a connection is aborted during file transfer. | | CVE-2000-0172 | Program only uses seteuid to drop privileges. | | CVE-2004-2504 | Windows program running as SYSTEM does not drop privileges before executing other
programs (many others like this, especially involving the Help facility). | | CVE-2004-0806 | Setuid program does not drop privileges before executing program specified in an
environment variable. | | CVE-2004-0828 | Setuid program does not drop privileges before processing file specified on command
line. | | CVE-2004-2070 | Service on Windows does not drop privileges before using "view file" option, allowing
code execution. |
| | Relationships | | | Source Taxonomies | PLOVER - Privilege Dropping / Lowering Errors | | Applicable Platforms | All |
|
- Weakness
- Base
- Variant
- Class
- Chain
- Composite
- Category
- View
- Deprecated
