CWE
Home > CWE List > CWE- Individual Dictionary Definition (1.6)  

CWE-387: Signal Errors

 
Signal Errors
Category ID: 387 (Category)Status: Incomplete
+ Description

Description Summary

Weaknesses in this category are related to the improper handling of signals.
+ Applicable Platforms

Languages

C

C++

+ Observed Examples
ReferenceDescription
CVE-2002-2039unhandled SIGSERV signal allows core dump
CVE-1999-1224SIGABRT (abort) signal not properly handled, causing core dump.
CVE-2004-1014Remote attackers cause a crash using early connection termination, which generates SIGPIPE signal.
CVE-2005-2377Library does not handle a SIGPIPE signal when a server becomes available during a search query. Overlaps unchecked error condition?
CVE-2002-0839SIGUSR1 can be sent as root from non-root process.
CVE-1999-1441Kernel does not prevent users from sending SIGIO signal, which causes crash in applications that do not handle it. Overlaps privileges.
CVE-2000-0747Script sends wrong signal to a process and kills it.
CVE-1999-1326Interruption of operation causes signal to be handled incorrectly, leading to crash.
CVE-2001-1180Shared signal handlers not cleared when executing a process. Overlaps initialization error.
CVE-2004-2069Privileged process does not properly signal unprivileged process after session termination, leading to connection consumption.
CVE-2004-2259SIGCHLD signal to FTP server can cause crash under heavy load while executing non-reentrant functions like malloc/free. Possibly signal handler race condition?
CVE-2005-0893Certain signals implemented with unsafe library calls.
+ Other Notes

Signal Handler Race Conditions are covered elsewhere.

+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfCategoryCategory361Time and State
Development Concepts (primary)699
ChildOfCategoryCategory634Weaknesses that Affect System Processes
Resource-specific Weaknesses (primary)631
ParentOfWeakness BaseWeakness Base364Signal Handler Race Condition
Development Concepts699
+ Affected Resources
  • System Process
+ Taxonomy Mappings
Mapped Taxonomy NameNode IDFitMapped Node Name
PLOVERSignal Errors
+ Maintenance Notes

Several sub-categories could exist, but this needs more study. Some sub-categories might be unhandled signals, untrusted signals, and sending the wrong signals.

+ Content History
Submissions
Submission DateSubmitterOrganizationSource
PLOVERExternally Mined
Modifications
Modification DateModifierOrganizationSource
2008-09-08CWE Content TeamMITREInternal
updated Applicable Platforms, Description, Maintenance Notes, Relationships, Observed Example, Other Notes, Taxonomy Mappings, Type
2009-07-27CWE Content TeamMITREInternal
updated Observed Examples
Back to top
Page Last Updated: October 29, 2009
 

CWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2009, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us