863
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Untrusted Data Appended with Trusted
Data
The CERT Oracle Secure
Coding Standard for Java
(2011)
ENV01-J Place all security-sensitive code in a
single JAR and sign and seal it
Related Attack Patterns
CAPEC-ID Attack Pattern Name
75 Manipulating Writeable Configuration Files
141 Cache Poisoning
142 DNS Cache Poisoning
CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
Weakness ID : 350
Structure : Simple
Abstraction : Variant
Description
The product performs reverse DNS resolution on an IP address to obtain the hostname and make
a security decision, but it does not properly ensure that the IP address is truly associated with the
hostname.
Extended Description
Since DNS names can be easily spoofed or misreported, and it may be difficult for the product
to detect if a trusted DNS server has been compromised, DNS names do not constitute a valid
authentication mechanism.
When the product performs a reverse DNS resolution for an IP address, if an attacker controls
the DNS server for that IP address, then the attacker can cause the server to return an arbitrary
hostname. As a result, the attacker may be able to bypass authentication, cause the wrong
hostname to be recorded in log files to hide activities, or perform other attacks.
Attackers can spoof DNS names by either (1) compromising a DNS server and modifying its
records (sometimes called DNS cache poisoning), or (2) having legitimate control over a DNS
server associated with their IP address.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 807 Reliance on Untrusted Inputs in a Security Decision 1714
ChildOf 290 Authentication Bypass by Spoofing 705
CanPrecede 923 Improper Restriction of Communication Channel to Intended
Endpoints