1468
Reference Description
CVE-2005-2456 Chain: array index error (CWE-129) leads to deadlock (CWE-833)
https://www.cve.org/CVERecord?id=CVE-2005-2456
CVE-2001-0682 Program can not execute when attacker obtains a mutex.
https://www.cve.org/CVERecord?id=CVE-2001-0682
CVE-2002-1914 Program can not execute when attacker obtains a lock on a critical output file.
https://www.cve.org/CVERecord?id=CVE-2002-1914
CVE-2002-1915 Program can not execute when attacker obtains a lock on a critical output file.
https://www.cve.org/CVERecord?id=CVE-2002-1915
CVE-2002-0051 Critical file can be opened with exclusive read access by user, preventing
application of security policy. Possibly related to improper permissions, largewindow
race condition.
https://www.cve.org/CVERecord?id=CVE-2002-0051
CVE-2000-0338 Chain: predictable file names used for locking, allowing attacker to create the
lock beforehand. Resultant from permissions and randomness.
https://www.cve.org/CVERecord?id=CVE-2000-0338
CVE-2000-1198 Chain: Lock files with predictable names. Resultant from randomness.
https://www.cve.org/CVERecord?id=CVE-2000-1198
CVE-2002-1869 Product does not check if it can write to a log file, allowing attackers to avoid
logging by accessing the file using an exclusive lock. Overlaps unchecked
error condition. This is not quite CWE-412, but close.
https://www.cve.org/CVERecord?id=CVE-2002-1869
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 748 CERT C Secure Coding Standard (2008) Appendix -
POSIX (POS)
734 2351
MemberOf 852 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 9 - Visibility and Atomicity (VNA)
844 2366
MemberOf 853 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 10 - Locking (LCK)
844 2366
MemberOf 884 CWE Cross-section 884 2567
MemberOf 986 SFP Secondary Cluster: Missing Lock 888 2411
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1142 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 08. Visibility and Atomicity (VNA)
1133 2448
MemberOf 1143 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 09. Locking (LCK)
1133 2449
MemberOf 1169 SEI CERT C Coding Standard - Guidelines 14.
Concurrency (CON)
1154 2462
MemberOf 1171 SEI CERT C Coding Standard - Guidelines 50. POSIX
(POS)
1154 2463
MemberOf 1401 Comprehensive Categorization: Concurrency 1400 2526
Notes
Maintenance
Deeper research is necessary for synchronization and related mechanisms, including locks,
mutexes, semaphores, and other mechanisms. Multiple entries are dependent on this research,
which includes relationships to concurrency, race conditions, reentrant functions, etc. CWE-662
CWE Version 4.14
CWE-668: Exposure of Resource to Wrong Sphere
CWE-668: Exposure of Resource to Wrong Sphere