|
|
|
|
CWE-291 Individual Dictionary Definition (Draft 9)
Compound Element ID
| Status: Incomplete 291 (Compound Element Variant: Composite) | | Description | Summary The use of IP addresses as authentication is flawed and can easily be spoofed by
malicious users. | | Likelihood of Exploit | High | | Weakness Ordinality | Resultant (Weakness is typically related to the presence of some other weaknesses) | | Causal Nature | Explicit (This is an explicit weakness resulting from behavior of the developer) | | Common Consequences | Authentication: Malicious users can fake authentication information,
impersonating any IP address. | | Potential Mitigations | Design: Use other means of identity verification that cannot be simply spoofed.
Possibilities include a username/password or certificate. | Demonstrative
Examples | C/C++ Example: sd = socket(AF_INET, SOCK_DGRAM, 0);
serv.sin_family = AF_INET;
serv.sin_addr.s_addr = htonl(INADDR_ANY);
servr.sin_port = htons(1008);
bind(sd, (struct sockaddr *) & serv, sizeof(serv));
while (1) {
memset(msg, 0x0, MAX_MSG);
clilen = sizeof(cli);
if (inet_ntoa(cli.sin_addr)==...) n = recvfrom(sd, msg, MAX_MSG, 0, (struct sockaddr *) & cli, &clilen);
} Java Example: while(true) {
DatagramPacket rp=new DatagramPacket(rData,rData.length);
outSock.receive(rp);
String in = new String(p.getData(),0, rp.getLength());
InetAddress IPAddress = rp.getAddress();
int port = rp.getPort();
if ((rp.getAddress()==...) & (in==...)) {
out = secret.getBytes();
DatagramPacket sp =new DatagramPacket(out,out.length, IPAddress, port); outSock.send(sp);
}
} | | Context Notes | As IP addresses can be easily spoofed, they do not constitute a valid authentication
mechanism. Alternate methods should be used if significant authentication is necessary. | | Relationships | | | Source Taxonomies | CLASP - Trusting self-reported IP address | | Applicable Platforms | All | | Time of Introduction | Architecture and Design | | Related Attack Patterns | | CAPEC-ID | Attack Pattern Name |
|---|
| 4 | Using Alternative IP Address Encodings |
|
|
- Weakness
- Base
- Variant
- Class
- Chain
- Composite
- Category
- View
- Deprecated
