990
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1014 Identify Actors 2429
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 417 Communication Channel Errors 2325
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Mobile (Prevalence = Undetermined)
Demonstrative Examples
Example 1:
This code listens on a port for DNS requests and sends the result to the requesting address.
Example Language: Python (Bad)
sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
sock.bind( (UDP_IP,UDP_PORT) )
while true:
data = sock.recvfrom(1024)
if not data:
break
(requestIP, nameToResolve) = parseUDPpacket(data)
record = resolveName(nameToResolve)
sendResponse(requestIP,record)
CWE Version 4.14
CWE-942: Permissive Cross-domain Policy with Untrusted Domains
CWE-942: Permissive Cross-domain Policy with Untrusted Domains