CWE - VIEW GRAPH: CWE-631: Resource-specific Weaknesses (1.6)

Home > CWE List > VIEW GRAPH: CWE-631: Resource-specific Weaknesses (1.6)

CWE List
Full Dictionary View
Development View
Research View
Reports

About
Sources
Process
Documents

Community
Related Activities
Discussion List
Research
CWE/SANS Top 25
CWSS

News
Calendar
Free Newsletter

Compatibility
Program
Requirements
Declarations
Make a Declaration

Contact Us
Search the Site

CWE-631: Resource-specific Weaknesses

Resource-specific Weaknesses

Definition in a New Window

View ID: 631 (View: Graph)

Status: Draft

View Data

View Objective

CWE nodes in this view (graph) occur when the application handles particular system resources.

View Metrics

	CWEs in this view		Total CWEs
Total	62	out of	791
Views	0	out of	22
Categories	11	out of	106
Weaknesses	46	out of	651
Compound_Elements	5	out of	12

Relationships

Nature	Type	ID	Name	View(s) this relationship pertains to
HasMember	Category	632	Weaknesses that Affect Files or Directories	Resource-specific Weaknesses (primary)631
HasMember	Category	633	Weaknesses that Affect Memory	Resource-specific Weaknesses (primary)631
HasMember	Category	634	Weaknesses that Affect System Processes	Resource-specific Weaknesses (primary)631
MemberOf	View	699	Development Concepts	Development Concepts (primary)699

Content History

Modifications
Modification Date	Modifier	Organization	Source
2008-09-08	CWE Content Team	MITRE	Internal
2008-09-08	updated Relationships, View Structure

Expand All | Collapse All

631 - Resource-specific Weaknesses

CategoryWeaknesses that Affect Files or Directories - (632)Weaknesses that Affect Files or Directories - (632)

Weakness ClassAccess Control (Authorization) Issues - (284)Access Control (Authorization) Issues - (284)

Weakness VariantFailure to Change Working Directory in chroot Jail - (243)Failure to Change Working Directory in chroot Jail - (243)

Weakness BaseFailure to Resolve Case Sensitivity - (178)Failure to Resolve Case Sensitivity - (178)

Weakness BaseFiles or Directories Accessible to External Parties - (552)Files or Directories Accessible to External Parties - (552)

Compound Element: CompositeImproper Control of Filename for Include/Require Statement in PHP Program ('PHP File Inclusion') - (98)Improper Control of Filename for Include/Require Statement in PHP Program ('PHP File Inclusion') - (98)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

Weakness BaseDirect Request ('Forced Browsing') - (425)Direct Request ('Forced Browsing') - (425)

Weakness BaseMissing Initialization - (456)Missing Initialization - (456)

Weakness VariantPHP External Variable Modification - (473)PHP External Variable Modification - (473)

Weakness VariantImproper Handling of Windows Device Names - (67)Improper Handling of Windows Device Names - (67)

Weakness BaseImproper Link Resolution Before File Access ('Link Following') - (59)Improper Link Resolution Before File Access ('Link Following') - (59)

Weakness ClassImproper Ownership Management - (282)Improper Ownership Management - (282)

Weakness BaseImproper Resolution of Path Equivalence - (41)Improper Resolution of Path Equivalence - (41)

Weakness BaseImproper Sanitization of Directives in Statically Saved Code ('Static Code Injection') - (96)Improper Sanitization of Directives in Statically Saved Code ('Static Code Injection') - (96)

Weakness VariantInformation Leak Through Server Log Files - (533)Information Leak Through Server Log Files - (533)

CategoryMac Virtual File Problems - (70)Mac Virtual File Problems - (70)

Weakness VariantApple '.DS_Store' - (71)Apple '.DS_Store' - (71)

Weakness VariantImproper Handling of Apple HFS+ Alternate Data Stream Path - (72)Improper Handling of Apple HFS+ Alternate Data Stream Path - (72)

Weakness VariantPassword in Configuration File - (260)Password in Configuration File - (260)

Weakness ClassPath Traversal - (22)Path Traversal - (22)

CategoryPermission Issues - (275)Permission Issues - (275)

CategoryTemporary File Issues - (376)Temporary File Issues - (376)

CategoryUNIX Path Link Problems - (60)UNIX Path Link Problems - (60)

Weakness VariantUNIX Hard Link - (62)UNIX Hard Link - (62)

Compound Element: CompositeUNIX Symbolic Link (Symlink) Following - (61)UNIX Symbolic Link (Symlink) Following - (61)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

CategoryPermission Issues - (275)Permission Issues - (275)

Weakness ClassPredictability Problems - (340)Predictability Problems - (340)

Weakness ClassRace Condition - (362)Race Condition - (362)

Weakness BaseSymbolic Name not Mapping to Correct Object - (386)Symbolic Name not Mapping to Correct Object - (386)

Compound Element: CompositeUnrestricted File Upload - (434)Unrestricted File Upload - (434)

Weakness BaseInsufficient Type Distinction - (351)Insufficient Type Distinction - (351)

Weakness BaseInterpretation Conflict - (436)Interpretation Conflict - (436)

Weakness VariantUse of Path Manipulation Function without Maximum-sized Buffer - (785)Use of Path Manipulation Function without Maximum-sized Buffer - (785)

CategoryWindows Path Link Problems - (63)Windows Path Link Problems - (63)

Weakness VariantWindows Hard Link - (65)Windows Hard Link - (65)

Weakness VariantWindows Shortcut Following (.LNK) - (64)Windows Shortcut Following (.LNK) - (64)

CategoryWindows Virtual File Problems - (68)Windows Virtual File Problems - (68)

Weakness VariantFailure to Handle Windows ::DATA Alternate Data Stream - (69)Failure to Handle Windows ::DATA Alternate Data Stream - (69)

Weakness VariantImproper Handling of Windows Device Names - (67)Improper Handling of Windows Device Names - (67)

CategoryWeaknesses that Affect Memory - (633)Weaknesses that Affect Memory - (633)

Compound Element: CompositeBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') - (120)Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') - (120)

Weakness ClassFailure to Fulfill API Contract ('API Abuse') - (227)Failure to Fulfill API Contract ('API Abuse') - (227)

Weakness BaseUse of Inherently Dangerous Function - (242)Use of Inherently Dangerous Function - (242)

Weakness BaseCompiler Removal of Code to Clear Buffers - (14)Compiler Removal of Code to Clear Buffers - (14)

Weakness VariantDouble Free - (415)Double Free - (415)

Weakness VariantFailure to Clear Heap Memory Before Release ('Heap Inspection') - (244)Failure to Clear Heap Memory Before Release ('Heap Inspection') - (244)

Weakness ClassFailure to Constrain Operations within the Bounds of a Memory Buffer - (119)Failure to Constrain Operations within the Bounds of a Memory Buffer - (119)

Weakness BaseFailure to Release Memory Before Removing Last Reference ('Memory Leak') - (401)Failure to Release Memory Before Removing Last Reference ('Memory Leak') - (401)

Weakness VariantHeap-based Buffer Overflow - (122)Heap-based Buffer Overflow - (122)

Weakness BaseImproper Validation of Array Index - (129)Improper Validation of Array Index - (129)

CategoryOften Misused: String Management - (251)Often Misused: String Management - (251)

Weakness VariantPlaintext Storage in Memory - (316)Plaintext Storage in Memory - (316)

Weakness BaseRelease of Invalid Pointer or Reference - (763)Release of Invalid Pointer or Reference - (763)

Weakness VariantSensitive Data Storage in Improperly Locked Memory - (591)Sensitive Data Storage in Improperly Locked Memory - (591)

Weakness BaseSensitive Information Uncleared Before Release - (226)Sensitive Information Uncleared Before Release - (226)

Weakness BaseUncontrolled Format String - (134)Uncontrolled Format String - (134)

Weakness BaseUse After Free - (416)Use After Free - (416)

Weakness VariantUse of Path Manipulation Function without Maximum-sized Buffer - (785)Use of Path Manipulation Function without Maximum-sized Buffer - (785)

CategoryWeaknesses that Affect System Processes - (634)Weaknesses that Affect System Processes - (634)

Weakness BaseArgument Injection or Modification - (88)Argument Injection or Modification - (88)

Weakness VariantCall to Thread run() instead of start() - (572)Call to Thread run() instead of start() - (572)

Weakness VariantFailure to Handle Windows ::DATA Alternate Data Stream - (69)Failure to Handle Windows ::DATA Alternate Data Stream - (69)

Weakness BaseImproper Check for Dropped Privileges - (273)Improper Check for Dropped Privileges - (273)

Weakness BaseImproper Sanitization of Special Elements used in an OS Command ('OS Command Injection') - (78)Improper Sanitization of Special Elements used in an OS Command ('OS Command Injection') - (78)

Weakness BaseIncorrect Privilege Assignment - (266)Incorrect Privilege Assignment - (266)

Weakness VariantJ2EE Bad Practices: Direct Use of Threads - (383)J2EE Bad Practices: Direct Use of Threads - (383)

Weakness BaseProcess Control - (114)Process Control - (114)

Weakness VariantProcess Environment Information Leak - (214)Process Environment Information Leak - (214)

Weakness BaseRace Condition During Access to Alternate Channel - (421)Race Condition During Access to Alternate Channel - (421)

Weakness BaseRace Condition within a Thread - (366)Race Condition within a Thread - (366)

CategorySignal Errors - (387)Signal Errors - (387)

Weakness BaseSignal Handler Race Condition - (364)Signal Handler Race Condition - (364)

Weakness BaseUNIX File Descriptor Leak - (403)UNIX File Descriptor Leak - (403)

Weakness VariantUnprotected Windows Messaging Channel ('Shatter') - (422)Unprotected Windows Messaging Channel ('Shatter') - (422)

Weakness VariantUnsafe Function Call from a Signal Handler - (479)Unsafe Function Call from a Signal Handler - (479)

Compound Element: CompositeUntrusted Search Path - (426)Untrusted Search Path - (426)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

Weakness BaseModification of Assumed-Immutable Data (MAID) - (471)Modification of Assumed-Immutable Data (MAID) - (471)

CategoryPermission Issues - (275)Permission Issues - (275)

Page Last Updated: October 29, 2009


	CWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2009, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us