CWE - VIEW GRAPH: CWE-631: Resource-specific Weaknesses (Draft 9)

Home > CWE List > VIEW GRAPH: CWE-631: Resource-specific Weaknesses (Draft 9)

CWE List
Full Dictionary View
Classification Tree
Reports

About
Sources
Process
Documents

Community
Related Activities
Discussion List
Research

News
Calendar
Free Newsletter

Compatibility
Program
Requirements
Declarations
Make a Declaration

Contact Us
Search the Site

Section Contents
CWE List
Full Dictionary View
Classification Tree
Reports
Other Items of Interest
Sources

(CWE-631)

View Definition

View Graph

Key
- Weakness
- Base
- Variant
- Class
- Chain
- Composite
- Category
- View
- Deprecated

VIEW GRAPH: CWE-631: Resource-specific Weaknesses (Draft 9)

View ID

Status: Draft

631 (View)

Objective

CWE nodes in this view (graph) occur when the application handles particular system resources.

View Data

	CWEs in this view		Total CWEs
Total	53	out of	695
Views	0	out of	14
Categories	7	out of	64
Weaknesses	42	out of	605
Compound_Elements	4	out of	12

Expand All | Collapse All

VIEW GRAPH: CWE-631: Resource-specific Weaknesses

Weaknesses that Affect Files or DirectoriesWeaknesses that Affect Files or Directories - (632)

Permission IssuesPermission Issues - (275)

Temporary File IssuesTemporary File Issues - (376)

Mac Virtual File ProblemsMac Virtual File Problems - (70)

Failure to Resolve Case SensitivityFailure to Resolve Case Sensitivity - (178)

Path TraversalPath Traversal - (22)

Failure to Change Working Directory in chroot JailFailure to Change Working Directory in chroot Jail - (243)

Often Misused: Path ManipulationOften Misused: Path Manipulation - (249)

Password in Configuration FilePassword in Configuration File - (260)

Improper Ownership ManagementImproper Ownership Management - (282)

Access Control IssuesAccess Control Issues - (284)

Failure to Resolve Path Equivalence Failure to Resolve Path Equivalence - (41)

Information Leak Through Server Log FilesInformation Leak Through Server Log Files - (533)

Files or Directories Accessible to External PartiesFiles or Directories Accessible to External Parties - (552)

Failure to Resolve Links Before File Access (aka 'Link Following')Failure to Resolve Links Before File Access (aka 'Link Following') - (59)

Failure to Handle Windows Device NamesFailure to Handle Windows Device Names - (67)

Insufficient Control of Directives in Statically Saved Code (Static Code Injection)Insufficient Control of Directives in Statically Saved Code (Static Code Injection) - (96)

Unrestricted File UploadUnrestricted File Upload - (434)

Insufficient Control of Filename for Include/Require Statement in PHP Program (aka 'PHP File Inclusion')Insufficient Control of Filename for Include/Require Statement in PHP Program (aka 'PHP File Inclusion') - (98)

Weaknesses that Affect MemoryWeaknesses that Affect Memory - (633)

Often Misused: String ManagementOften Misused: String Management - (251)

Failure to Constrain Operations within the Bounds of an Allocated Memory BufferFailure to Constrain Operations within the Bounds of an Allocated Memory Buffer - (119)

Heap-based Buffer OverflowHeap-based Buffer Overflow - (122)

Unchecked Array IndexingUnchecked Array Indexing - (129)

Uncontrolled Format StringUncontrolled Format String - (134)

Compiler Removal of Code to Clear BuffersCompiler Removal of Code to Clear Buffers - (14)

Sensitive Information Uncleared Before ReleaseSensitive Information Uncleared Before Release - (226)

Failure to Clear Heap Memory Before ReleaseFailure to Clear Heap Memory Before Release - (244)

Plaintext Storage in MemoryPlaintext Storage in Memory - (316)

Failure to Release Memory Before Removing Last Reference (aka 'Memory Leak')Failure to Release Memory Before Removing Last Reference (aka 'Memory Leak') - (401)

Double FreeDouble Free - (415)

Use After FreeUse After Free - (416)

Free of Invalid Pointer Not on the HeapFree of Invalid Pointer Not on the Heap - (590)

Sensitive Data Storage in Improperly Locked MemorySensitive Data Storage in Improperly Locked Memory - (591)

Unbounded Transfer ('Classic Buffer Overflow')Unbounded Transfer ('Classic Buffer Overflow') - (120)

Weaknesses that Affect System ProcessesWeaknesses that Affect System Processes - (634)

Process ControlProcess Control - (114)

Process Environment Information LeakProcess Environment Information Leak - (214)

Incorrect Privilege AssignmentIncorrect Privilege Assignment - (266)

Failure to Check Whether Privileges Were Dropped SuccessfullyFailure to Check Whether Privileges Were Dropped Successfully - (273)

Signal Handler Race ConditionSignal Handler Race Condition - (364)

Race Condition within a ThreadRace Condition within a Thread - (366)

J2EE Bad Practices: Direct Use of ThreadsJ2EE Bad Practices: Direct Use of Threads - (383)

Signal ErrorsSignal Errors - (387)

UNIX File Descriptor LeakUNIX File Descriptor Leak - (403)

Race Condition During Access to Alternate ChannelRace Condition During Access to Alternate Channel - (421)

Unprotected Windows Messaging Channel ('Shatter')Unprotected Windows Messaging Channel ('Shatter') - (422)

Unsafe Function Call from a Signal HandlerUnsafe Function Call from a Signal Handler - (479)

Call to Thread run() instead of start()Call to Thread run() instead of start() - (572)

Failure to Handle Windows ::DATA Alternate Data StreamFailure to Handle Windows ::DATA Alternate Data Stream - (69)

Failure to Sanitize Data into an OS Command (aka 'OS Command Injection')Failure to Sanitize Data into an OS Command (aka 'OS Command Injection') - (78)

Argument Injection or ModificationArgument Injection or Modification - (88)

Untrusted Search PathUntrusted Search Path - (426)

Page Last Updated: April 11, 2008


	CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us