2321
place at exactly the same time. Defects rush to fill the gap between the programmer's model of
how a program executes and what happens in reality. These defects are related to unexpected
interactions between threads, processes, time, and information. These interactions happen through
shared state: semaphores, variables, the file system, and, basically, anything that can store
information."
Membership
Nature Type ID Name Page
MemberOf 700 Seven Pernicious Kingdoms 700 2557
HasMember 364 Signal Handler Race Condition 700 899
HasMember 367 Time-of-check Time-of-use (TOCTOU) Race Condition 700 906
HasMember 377 Insecure Temporary File 700 925
HasMember 382 J2EE Bad Practices: Use of System.exit() 700 933
HasMember 383 J2EE Bad Practices: Direct Use of Threads 700 935
HasMember 384 Session Fixation 700 936
HasMember 412 Unrestricted Externally Accessible Lock 700 1000
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security
%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf >.
Category-371: State Issues
Category ID : 371
Summary
Weaknesses in this category are related to improper management of system state.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 15 External Control of System or Configuration Setting 699 17
HasMember 372 Incomplete Internal State Distinction 699 919
HasMember 374 Passing Mutable Objects to an Untrusted Method 699 920
HasMember 375 Returning a Mutable Object to an Untrusted Caller 699 923
HasMember 1265 Unintended Reentrant Invocation of Non-reentrant Code
Via Nested Calls
699 2088
Category-387: Signal Errors
Category ID : 387
Summary
Weaknesses in this category are related to the improper handling of signals.
Membership
CWE Version 4.14
CWE-388: 7PK - Errors
CWE-388: 7PK - Errors