1737
Applicable Platforms
Language : XML (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality Read Files or Directories
If the attacker is able to include a crafted DTD and a
default entity resolver is enabled, the attacker may be able
to access arbitrary files on the system.
Availability DoS: Resource Consumption (CPU)
DoS: Resource Consumption (Memory)
The DTD may cause the parser to consume excessive
CPU cycles or memory using techniques such as nested or
recursive entity references (CWE-776).
Integrity
Confidentiality
Availability
Access Control
Execute Unauthorized Code or Commands
Gain Privileges or Assume Identity
The DTD may include arbitrary HTTP requests that the
server may execute. This could lead to other attacks
leveraging the server's trust relationship with other entities.
Observed Examples
Reference Description
CVE-2010-2076 Product does not properly reject DTDs in SOAP messages, which allows
remote attackers to read arbitrary files, send HTTP requests to intranet
servers, or cause a denial of service.
https://www.cve.org/CVERecord?id=CVE-2010-2076
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
References
[REF-773]Daniel Kulp. "Apache CXF Security Advisory (CVE-2010-2076)". 2010 June 6. < http://
svn.apache.org/repos/asf/cxf/trunk/security/CVE-2010-2076.pdf >.
CWE-828: Signal Handler with Functionality that is not Asynchronous-Safe
Weakness ID : 828
Structure : Simple
Abstraction : Variant
Description
The product defines a signal handler that contains code sequences that are not asynchronoussafe,
i.e., the functionality is not reentrant, or it can be interrupted.
Extended Description
This can lead to an unexpected system state with a variety of potential consequences depending
on context, including denial of service and code execution.
CWE Version 4.14
CWE-828: Signal Handler with Functionality that is not Asynchronous-Safe
CWE-828: Signal Handler with Functionality that is not Asynchronous-Safe