CWE-389: Error Conditions, Return Values, Status Codes
Error Conditions, Return Values, Status Codes
Category ID: 389 (Category)
Status: Incomplete
Description
Description Summary
If a function in a product does not generate the correct
return/status codes, or if the product does not handle all possible
return/status codes that could be generated by a function, then security issues
may result.
Extended Description
This type of problem is most often found in conditions that are rarely
encountered during the normal operation of the product. Presumably, most
bugs related to common conditions are found and eliminated during
development and testing. In some cases, the attacker can directly control or
influence the environment to trigger the rare conditions.
Applicable Platforms
Languages
All
Other Notes
This category is often primary to a variety of other weaknesses.
Many researchers focus on the resultant weaknesses and do not necessarily
diagnose whether a rare condition is the primary factor. However, since 2005
it seems to be reported more frequently than in the past. This subject needs
more study.
Taxonomy Mappings
Mapped Taxonomy Name
Node ID
Fit
Mapped Node Name
PLOVER
Error Conditions, Return Values, Status
Codes
Content History
Submissions
Submission Date
Submitter
Organization
Source
PLOVER
Externally Mined
Modifications
Modification Date
Modifier
Organization
Source
2008-09-08
CWE Content Team
MITRE
Internal
updated Relationships, Other Notes,
Taxonomy Mappings
Description
