2353
Category-752: 2009 Top 25 - Risky Resource Management
Category ID : 752
Summary
Weaknesses in this category are listed in the "Risky Resource Management" section of the 2009
CWE/SANS Top 25 Programming Errors.
Membership
Nature Type ID Name Page
MemberOf 750 Weaknesses in the 2009 CWE/SANS Top 25 Most
Dangerous Programming Errors
750 2562
HasMember 73 External Control of File Name or Path 750 132
HasMember 94 Improper Control of Generation of Code ('Code
Injection')
750 219
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
750 293
HasMember 404 Improper Resource Shutdown or Release 750 980
HasMember 426 Untrusted Search Path 750 1028
HasMember 494 Download of Code Without Integrity Check 750 1185
HasMember 642 External Control of Critical State Data 750 1414
HasMember 665 Improper Initialization 750 1456
HasMember 682 Incorrect Calculation 750 1499
References
[REF-615]"2009 CWE/SANS Top 25 Most Dangerous Programming Errors". 2009 January 2. <
http://cwe.mitre.org/top25/archive/2009/2009_cwe_sans_top25.html >.
Category-753: 2009 Top 25 - Porous Defenses
Category ID : 753
Summary
Weaknesses in this category are listed in the "Porous Defenses" section of the 2009 CWE/SANS
Top 25 Programming Errors.
Membership
Nature Type ID Name Page
MemberOf 750 Weaknesses in the 2009 CWE/SANS Top 25 Most
Dangerous Programming Errors
750 2562
HasMember 250 Execution with Unnecessary Privileges 750 599
HasMember 259 Use of Hard-coded Password 750 623
HasMember 285 Improper Authorization 750 684
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 750 799
HasMember 330 Use of Insufficiently Random Values 750 814
HasMember 602 Client-Side Enforcement of Server-Side Security 750 1350
HasMember 732 Incorrect Permission Assignment for Critical Resource 750 1551
HasMember 798 Use of Hard-coded Credentials 750 1690
References
CWE Version 4.14
CWE-801: 2010 Top 25 - Insecure Interaction Between Components
CWE-801: 2010 Top 25 - Insecure Interaction Between Components