2422
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security
%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf >.
Category-1006: Bad Coding Practices
Category ID : 1006
Summary
Weaknesses in this category are related to coding practices that are deemed unsafe and increase
the chances that an exploitable vulnerability will be present in the application. These weaknesses
do not directly introduce a vulnerability, but indicate that the product has not been carefully
developed or maintained. If a program is complex, difficult to maintain, not portable, or shows
evidence of neglect, then there is a higher likelihood that weaknesses are buried in the code.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 358 Improperly Implemented Security Check for Standard 699 881
HasMember 360 Trust of System Event Data 699 887
HasMember 478 Missing Default Case in Multiple Condition Expression 699 1142
HasMember 487 Reliance on Package-level Scope 699 1167
HasMember 489 Active Debug Code 699 1171
HasMember 547 Use of Hard-coded, Security-relevant Constants 699 1259
HasMember 561 Dead Code 699 1275
HasMember 562 Return of Stack Variable Address 699 1278
HasMember 563 Assignment to Variable without Use 699 1280
HasMember 581 Object Model Violation: Just One of Equals and
Hashcode Defined
699 1312
HasMember 586 Explicit Call to Finalize() 699 1320
HasMember 605 Multiple Binds to the Same Port 699 1356
HasMember 628 Function Call with Incorrectly Specified Arguments 699 1398
HasMember 654 Reliance on a Single Factor in a Security Decision 699 1439
HasMember 656 Reliance on Security Through Obscurity 699 1444
HasMember 694 Use of Multiple Resources with Duplicate Identifier 699 1523
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 699 1714
HasMember 1041 Use of Redundant Code 699 1875
HasMember 1043 Data Element Aggregating an Excessively Large
Number of Non-Primitive Elements
699 1877
HasMember 1044 Architecture with Number of Horizontal Layers Outside
of Expected Range
699 1879
HasMember 1045 Parent Class with a Virtual Destructor and a Child Class
without a Virtual Destructor
699 1880
HasMember 1046 Creation of Immutable Text Using String Concatenation 699 1881
HasMember 1048 Invokable Control Element with Large Number of
Outward Calls
699 1883
HasMember 1049 Excessive Data Query Operations in a Large Data
Table
699 1884
CWE Version 4.14
CWE-1006: Bad Coding Practices
CWE-1006: Bad Coding Practices