1847
This code sends a DNS record to a requesting IP address. UDP allows the source IP address to be
easily changed ('spoofed'), thus allowing an attacker to redirect responses to a target, which may
be then be overwhelmed by the network traffic.
Observed Examples
Reference Description
CVE-2013-5211 composite: NTP feature generates large responses (high amplification factor)
with spoofed UDP source addresses.
https://www.cve.org/CVERecord?id=CVE-2013-5211
CVE-1999-0513 Classic "Smurf" attack, using spoofed ICMP packets to broadcast addresses.
https://www.cve.org/CVERecord?id=CVE-1999-0513
CVE-1999-1379 DNS query with spoofed source address causes more traffic to be returned to
spoofed address than was sent by the attacker.
https://www.cve.org/CVERecord?id=CVE-1999-1379
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
References
[REF-941]US-CERT. "UDP-based Amplification Attacks". 2014 January 7. < https://www.uscert.
gov/ncas/alerts/TA14-017A >.
[REF-942]Fortify. "Android Bad Practices: Sticky Broadcast". < https://www.hpe.com/us/en/
solutions/infrastructure-security.html?jumpid=va_wnmstr1ug6_aid-510326901 >.2023-04-07.
CWE-942: Permissive Cross-domain Policy with Untrusted Domains
Weakness ID : 942
Structure : Simple
Abstraction : Variant
Description
The product uses a cross-domain policy file that includes domains that should not be trusted.
Extended Description
A cross-domain policy file ("crossdomain.xml" in Flash and "clientaccesspolicy.xml" in Silverlight)
defines a list of domains from which a server is allowed to make cross-domain requests. When
making a cross-domain request, the Flash or Silverlight client will first look for the policy file on
the target server. If it is found, and the domain hosting the application is explicitly allowed to make
requests, the request is made.
Therefore, if a cross-domain policy file includes domains that should not be trusted, such as when
using wildcards, then the application could be attacked by these untrusted domains.
An overly permissive policy file allows many of the same attacks seen in Cross-Site Scripting
(CWE-79). Once the user has executed a malicious Flash or Silverlight application, they are
vulnerable to a variety of attacks. The attacker could transfer private information, such as cookies
that may include session information, from the victim's machine to the attacker. The attacker could
send malicious requests to a web site on behalf of the victim, which could be especially dangerous
to the site if the victim has administrator privileges to manage that site.
CWE Version 4.14
CWE-942: Permissive Cross-domain Policy with Untrusted Domains
CWE-942: Permissive Cross-domain Policy with Untrusted Domains