572
Reference Description
https://www.cve.org/CVERecord?id=CVE-2004-1504
CVE-2005-2053 Blank parameter causes external error infoleak.
https://www.cve.org/CVERecord?id=CVE-2005-2053
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 851 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 8 - Exceptional Behavior (ERR)
844 2365
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Research Gap
Some "crash by port scan" bugs are probably due to this, but lack of diagnosis makes it difficult
to be certain.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Missing Value Error
The CERT Oracle Secure
Coding Standard for Java
(2011)
ERR08-J Do not catch NullPointerException or
any of its ancestors
CWE-231: Improper Handling of Extra Values
Weakness ID : 231
Structure : Simple
Abstraction : Variant
Description
The product does not handle or incorrectly handles when more values are provided than expected.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 229 Improper Handling of Values 570
CanPrecede 120 Buffer Copy without Checking Size of Input ('Classic Buffer
Overflow')