CWE-403: UNIX File Descriptor Leak
UNIX File Descriptor Leak
Weakness ID: 403 (Weakness Base) Status: Draft
Description
Description Summary
A process does not close sensitive file descriptors before
invoking a child process, which allows the child to perform unauthorized I/O
operations using those descriptors.
Time of Introduction
Architecture and Design
Implementation
Observed Examples
Reference Description CVE-2004-1033 File descriptor leak allows read of restricted
files. CVE-2000-0094 Access to restricted resource using modified file
descriptor for stderr. CVE-2002-0638 Open file descriptor used as alternate channel in
complex race condition. CVE-2003-0489 Program does not fully drop privileges after
creating a file descriptor, which allows access to the descriptor via a
separate vulnerability. CVE-2003-0937 User bypasses restrictions by obtaining a file
descriptor then calling setuid program, which does not close the
descriptor. CVE-2004-2215 Terminal manager does not properly close file
descriptors, allowing attackers to access terminals of other
users.
Relationships
Affected Resources
System Process
File/Directory
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name PLOVER UNIX file descriptor leak CERT C Secure Coding FIO42-C Ensure files are properly closed when they are no longer
needed
Content History
Submissions Submission Date Submitter Organization Source PLOVER Externally Mined Modifications Modification Date Modifier Organization Source 2008-07-01 Eric Dalci Cigital External updated Time of Introduction 2008-09-08 CWE Content Team MITRE Internal updated Applicable Platforms, Relationships,
Taxonomy Mappings 2008-11-24 CWE Content Team MITRE Internal updated Affected Resources, Observed Examples,
Relationships, Taxonomy Mappings
Description
