2339
Category-730: OWASP Top Ten 2004 Category A9 - Denial of Service
Category ID : 730
Summary
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 170 Improper Null Termination 711 428
HasMember 248 Uncaught Exception 711 596
HasMember 369 Divide By Zero 711 913
HasMember 382 J2EE Bad Practices: Use of System.exit() 711 933
HasMember 400 Uncontrolled Resource Consumption 711 964
HasMember 401 Missing Release of Memory after Effective Lifetime 711 973
HasMember 404 Improper Resource Shutdown or Release 711 980
HasMember 405 Asymmetric Resource Consumption (Amplification) 711 986
HasMember 410 Insufficient Resource Pool 711 998
HasMember 412 Unrestricted Externally Accessible Lock 711 1000
HasMember 476 NULL Pointer Dereference 711 1132
HasMember 674 Uncontrolled Recursion 711 1484
References
[REF-590]OWASP. "A9 Denial of Service". 2007. < http://sourceforge.net/project/showfiles.php?
group_id=64424&package_id=70827 >.
Category-731: OWASP Top Ten 2004 Category A10 - Insecure Configuration
Management
Category ID : 731
Summary
Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 5 J2EE Misconfiguration: Data Transmission Without
Encryption
711 1
HasMember 6 J2EE Misconfiguration: Insufficient Session-ID Length 711 2
HasMember 7 J2EE Misconfiguration: Missing Custom Error Page 711 4
HasMember 8 J2EE Misconfiguration: Entity Bean Declared Remote 711 6
HasMember 9 J2EE Misconfiguration: Weak Access Permissions for
EJB Methods
711 8
HasMember 11 ASP.NET Misconfiguration: Creating Debug Binary 711 9
HasMember 12 ASP.NET Misconfiguration: Missing Custom Error Page 711 11
HasMember 13 ASP.NET Misconfiguration: Password in Configuration
File
711 13
HasMember 209 Generation of Error Message Containing Sensitive
Information
711 533
CWE Version 4.14
CWE-735: CERT C Secure Coding Standard (2008) Chapter 2 - Preprocessor (PRE)
CWE-735: CERT C Secure Coding Standard
(2008) Chapter 2 - Preprocessor (PRE) 2340
Nature Type ID Name Page
HasMember 215 Insertion of Sensitive Information Into Debugging Code 711 551
HasMember 219 Storage of File with Sensitive Data Under Web Root 711 553
HasMember 275 Permission Issues 711 2317
HasMember 295 Improper Certificate Validation 711 714
HasMember 459 Incomplete Cleanup 711 1099
HasMember 489 Active Debug Code 711 1171
HasMember 520 .NET Misconfiguration: Use of Impersonation 711 1222
HasMember 526 Cleartext Storage of Sensitive Information in an
Environment Variable
711 1234
HasMember 527 Exposure of Version-Control Repository to an
Unauthorized Control Sphere
711 1236
HasMember 528 Exposure of Core Dump File to an Unauthorized Control
Sphere
711 1237
HasMember 529 Exposure of Access Control List Files to an
Unauthorized Control Sphere
711 1238
HasMember 530 Exposure of Backup File to an Unauthorized Control
Sphere
711 1239
HasMember 531 Inclusion of Sensitive Information in Test Code 711 1240
HasMember 532 Insertion of Sensitive Information into Log File 711 1241
HasMember 540 Inclusion of Sensitive Information in Source Code 711 1251
HasMember 541 Inclusion of Sensitive Information in an Include File 711 1253
HasMember 548 Exposure of Information Through Directory Listing 711 1261
HasMember 552 Files or Directories Accessible to External Parties 711 1265
HasMember 554 ASP.NET Misconfiguration: Not Using Input Validation
Framework
711 1269
HasMember 555 J2EE Misconfiguration: Plaintext Password in
Configuration File
711 1270
HasMember 556 ASP.NET Misconfiguration: Use of Identity
Impersonation
711 1271
References
[REF-591]OWASP. "A10 Insecure Configuration Management". 2007. < http://sourceforge.net/
project/showfiles.php?group_id=64424&package_id=70827 >.
Category-735: CERT C Secure Coding Standard (2008) Chapter 2 -
Preprocessor (PRE)
Category ID : 735
Summary
Weaknesses in this category are related to the rules and recommendations in the Preprocessor
(PRE) chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 684 Incorrect Provision of Specified Functionality 734 1505
Notes
CWE Version 4.14
CWE-736: CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL)
CWE-736: CERT C Secure Coding Standard (2008)
Chapter 3 - Declarations and Initialization (DCL)