CWE-69 - Improper Handling of Windows ::DATA Alternate Data Stream
CWE-69
- Abstraction:
- Variant
- Structure:
- Simple
- Status:
- Incomplete
- Weakness Name
Improper Handling of Windows ::DATA Alternate Data Stream
- Description
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
An attacker can use an ADS to hide information about a file (e.g. size, the name of the process) from a system or file browser tools such as Windows Explorer and 'dir' at the command line utility. Alternately, the attacker might be able to bypass intended access restrictions for the associated data fork.
- Common Consequences
Scope: Access Control, Non-Repudiation, Other
Impact: Bypass Protection Mechanism, Hide Activities, Other
- Related Weaknesses
- Release Date:
- 2006-07-19
- Latest Modification Date:
- 2023-06-29
Free security scan for your website