2409
Category-980: SFP Secondary Cluster: Link in Resource Name Resolution
Category ID : 980
Summary
This category identifies Software Fault Patterns (SFPs) within the Link in Resource Name
Resolution cluster (SFP18).
Membership
Nature Type ID Name Page
MemberOf 893 SFP Primary Cluster: Path Resolution 888 2384
HasMember 59 Improper Link Resolution Before File Access ('Link
Following')
888 111
HasMember 62 UNIX Hard Link 888 119
HasMember 64 Windows Shortcut Following (.LNK) 888 121
HasMember 65 Windows Hard Link 888 123
HasMember 386 Symbolic Name not Mapping to Correct Object 888 942
HasMember 610 Externally Controlled Reference to a Resource in
Another Sphere
888 1364
Category-981: SFP Secondary Cluster: Path Traversal
Category ID : 981
Summary
This category identifies Software Fault Patterns (SFPs) within the Path Traversal cluster (SFP16).
Membership
Nature Type ID Name Page
MemberOf 893 SFP Primary Cluster: Path Resolution 888 2384
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
888 33
HasMember 23 Relative Path Traversal 888 46
HasMember 24 Path Traversal: '../filedir' 888 53
HasMember 25 Path Traversal: '/../filedir' 888 54
HasMember 26 Path Traversal: '/dir/../filename' 888 56
HasMember 27 Path Traversal: 'dir/../../filename' 888 58
HasMember 28 Path Traversal: '..\filedir' 888 59
HasMember 29 Path Traversal: '\..\filename' 888 61
HasMember 30 Path Traversal: '\dir\..\filename' 888 63
HasMember 31 Path Traversal: 'dir\..\..\filename' 888 65
HasMember 32 Path Traversal: '...' (Triple Dot) 888 67
HasMember 33 Path Traversal: '....' (Multiple Dot) 888 69
HasMember 34 Path Traversal: '....//' 888 71
HasMember 35 Path Traversal: '.../...//' 888 73
HasMember 36 Absolute Path Traversal 888 75
HasMember 37 Path Traversal: '/absolute/pathname/here' 888 79
HasMember 38 Path Traversal: '\absolute\pathname\here' 888 80
HasMember 39 Path Traversal: 'C:dirname' 888 82
HasMember 40 Path Traversal: '\\UNC\share\name\' (Windows UNC
Share)
888 85
CWE Version 4.14
CWE-982: SFP Secondary Cluster: Failure to Release Resource
CWE-982: SFP Secondary Cluster: Failure to Release Resource