Improper Handling of File Names that Identify Virtual Resources
|ID: 66||Date: (C)2012-05-14 (M)2012-11-08|
|Type: weakness||Status: DRAFT|
|Abstraction Type: Base|
The product does not handle or incorrectly handles a file name
that identifies a "virtual" resource that is not directly specified within the
directory that is associated with the file name, causing the product to perform
file-based operations on a resource that is not a file.
Extended DescriptionVirtual file names are represented like normal file names, but they are
effectively aliases for other resources that do not behave like normal
files. Depending on their functionality, they could be alternate entities.
They are not necessarily listed in directories.
Applicable PlatformsLanguage Class: All
Time Of Introduction
- Architecture and Design
|Other ||Other || |
|CWE-66 ChildOf CWE-893 ||Category ||CWE-888 || |
White Box Definitions None
Black Box Definitions None
|PLOVER || ||Virtual Files || |