2352
Nature Type ID Name Page
HasMember 686 Function Call With Incorrect Argument Type 734 1508
HasMember 696 Incorrect Behavior Order 734 1527
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-59 POS01-C Check for the existence of links when dealing with
files CWE-170 POS30-C Use the readlink() function properly CWE-242 POS33-C Do not use
vfork() CWE-272 POS02-C Follow the principle of least privilege CWE-273 POS37-C Ensure
that privilege relinquishment is successful CWE-363 POS35-C Avoid race conditions while
checking for the existence of a symbolic link CWE-366 POS00-C Avoid race conditions with
multiple threads CWE-562 POS34-C Do not call putenv() with a pointer to an automatic variable
as the argument CWE-667 POS31-C Do not unlock or destroy another thread's mutex CWE-686
POS34-C Do not call putenv() with a pointer to an automatic variable as the argument CWE-696
POS36-C Observe correct revocation order while relinquishing privileges
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-751: 2009 Top 25 - Insecure Interaction Between Components
Category ID : 751
Summary
Weaknesses in this category are listed in the "Insecure Interaction Between Components" section
of the 2009 CWE/SANS Top 25 Programming Errors.
Membership
Nature Type ID Name Page
MemberOf 750 Weaknesses in the 2009 CWE/SANS Top 25 Most
Dangerous Programming Errors
750 2562
HasMember 20 Improper Input Validation 750 20
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
750 151
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
750 163
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
750 201
HasMember 116 Improper Encoding or Escaping of Output 750 281
HasMember 209 Generation of Error Message Containing Sensitive
Information
750 533
HasMember 319 Cleartext Transmission of Sensitive Information 750 779
HasMember 352 Cross-Site Request Forgery (CSRF) 750 868
HasMember 362 Concurrent Execution using Shared Resource with
Improper Synchronization ('Race Condition')
750 888
References
[REF-615]"2009 CWE/SANS Top 25 Most Dangerous Programming Errors". 2009 January 2. <
http://cwe.mitre.org/top25/archive/2009/2009_cwe_sans_top25.html >.
CWE Version 4.14
CWE-752: 2009 Top 25 - Risky Resource Management
CWE-752: 2009 Top 25 - Risky Resource Management