1028
CWE-426: Untrusted Search Path
Weakness ID : 426
Structure : Simple
Abstraction : Base
Description
The product searches for critical resources using an externally-supplied search path that can point
to resources that are not under the product's direct control.
Extended Description
This might allow attackers to execute their own programs, access unauthorized data files, or modify
configuration in unexpected ways. If the product uses a search path to locate critical resources
such as programs, then an attacker could modify that search path to point to a malicious program,
which the targeted product would then execute. The problem extends to any type of critical
resource that the product trusts.
Some of the most common variants of untrusted search path are:
• In various UNIX and Linux-based systems, the PATH environment variable may be consulted
to locate executable programs, and LD_PRELOAD may be used to locate a separate library.
• In various Microsoft-based systems, the PATH environment variable is consulted to locate a
DLL, if the DLL is not found in other paths that appear earlier in the search order.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 673 External Influence of Sphere Definition 1483
ChildOf 642 External Control of Critical State Data 1414
PeerOf 427 Uncontrolled Search Path Element 1033
PeerOf 428 Unquoted Search Path or Element 1039
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1219 File Handling Issues 2480
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Alternate Terms
CWE Version 4.14
CWE-426: Untrusted Search Path
CWE-426: Untrusted Search Path