CWE-403 Detail

CWE-403

Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
Draft
2006-07-19
00h00 +00:00
2023-06-29
00h00 +00:00
CWE Mitre.org
Notifications for a CWE
Stay informed of any changes for a specific CWE.
Notifications manage

Name: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.

CWE Description

When a new process is forked or executed, the child process inherits any open file descriptors. When the child process has fewer privileges than the parent process, this might introduce a vulnerability if the child process can access the file descriptor but does not have the privileges to access the associated file.

General Informations

Modes Of Introduction

Implementation : REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Applicable Platforms

Language

Class: Not Language-Specific (Undetermined)

Operating Systems

Class: Unix (Undetermined)

Common Consequences

Scope Impact Likelihood
Confidentiality
Integrity		Read Application Data, Modify Application Data

Observed Examples

References Description

CVE-2003-0740

Server leaks a privileged file descriptor, allowing the server to be hijacked.

CVE-2004-1033

File descriptor leak allows read of restricted files.

CVE-2000-0094

Access to restricted resource using modified file descriptor for stderr.

CVE-2002-0638

Open file descriptor used as alternate channel in complex race condition.

CVE-2003-0489

Program does not fully drop privileges after creating a file descriptor, which allows access to the descriptor via a separate vulnerability.

CVE-2003-0937

User bypasses restrictions by obtaining a file descriptor then calling setuid program, which does not close the descriptor.

CVE-2004-2215

Terminal manager does not properly close file descriptors, allowing attackers to access terminals of other users.

CVE-2006-5397

Module opens a file for reading twice, allowing attackers to read files.

Vulnerability Mapping Notes

Justification : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Comment : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

References

REF-392

File descriptors and setuid applications
Paul Roberts.
https://blogs.oracle.com/paulr/entry/file_descriptors_and_setuid_applications

REF-393

Introduction to Secure Coding Guide
Apple.
https://developer.apple.com/library/archive/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html

Submission

Name Organization Date Date release Version
PLOVER 2006-07-19 +00:00 2006-07-19 +00:00 Draft 3

Modifications

Name Organization Date Comment
Eric Dalci Cigital 2008-07-01 +00:00 updated Time_of_Introduction
CWE Content Team MITRE 2008-09-08 +00:00 updated Applicable_Platforms, Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2008-11-24 +00:00 updated Affected_Resources, Observed_Examples, Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2011-03-29 +00:00 updated Name
CWE Content Team MITRE 2011-06-01 +00:00 updated Common_Consequences
CWE Content Team MITRE 2011-06-27 +00:00 updated Common_Consequences
CWE Content Team MITRE 2011-09-13 +00:00 updated Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2012-05-11 +00:00 updated Relationships
CWE Content Team MITRE 2013-02-21 +00:00 updated Alternate_Terms, Description, Name, Observed_Examples, References
CWE Content Team MITRE 2014-07-30 +00:00 updated Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2017-11-08 +00:00 updated Affected_Resources, Applicable_Platforms, Modes_of_Introduction, References, Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated References, Relationships, Time_of_Introduction
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes