1845
Reference Description
CVE-2001-1452 DNS server caches glue records received from non-delegated name servers
https://www.cve.org/CVERecord?id=CVE-2001-1452
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1353 OWASP Top Ten 2021 Category A07:2021 -
Identification and Authentication Failures
1344 2494
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Relationship
While many access control issues involve authenticating the user, this weakness is more about
authenticating the actual source of the communication channel itself; there might not be any
"user" in such cases.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
500 WebView Injection
594 Traffic Injection
595 Connection Reset
596 TCP RST Injection
References
[REF-324]Taimur Aslam. "A Taxonomy of Security Faults in the UNIX
Operating System". 1995 August 1. < http://cwe.mitre.org/documents/sources/
ATaxonomyofSecurityFaultsintheUNIXOperatingSystem%5BAslam95%5D.pdf >.
CWE-941: Incorrectly Specified Destination in a Communication Channel
Weakness ID : 941
Structure : Simple
Abstraction : Base
Description
The product creates a communication channel to initiate an outgoing request to an actor, but it
does not correctly specify the intended destination for that actor.
Extended Description
Attackers at the destination may be able to spoof trusted servers to steal data or cause a denial of
service.
There are at least two distinct weaknesses that can cause the product to communicate with an
unintended destination:
• If the product allows an attacker to control which destination is specified, then the attacker can
cause it to connect to an untrusted or malicious destination. For example, because UDP is a
connectionless protocol, UDP packets can be spoofed by specifying a false source address in
the packet; when the server receives the packet and sends a reply, it will specify a destination
by using the source of the incoming packet - i.e., the false source. The server can then be
tricked into sending traffic to the wrong host, which is effective for hiding the real source of an
CWE Version 4.14
CWE-941: Incorrectly Specified Destination in a Communication Channel
CWE-941: Incorrectly Specified Destination in a Communication Channel