Detailedlikelihood: Highseverity: HighDraft
CAPEC-52Embedding NULL Bytes
Abstraction
Detailed
Status
Draft
Likelihood
High
Severity
High
Description
An adversary embeds one or more null bytes in input to the target software. This attack relies on the usage of a null-valued byte as a string terminator in many environments. The goal is for certain components of the target software to stop processing the input when it encounters the null byte(s).
Metadata: detailed CAPEC pattern, status draft, likelihood high, severity high. Underlying weaknesses: CWE-158, CWE-172, CWE-173, CWE-74, CWE-20 (and 2 more). Related CAPEC pattern: [object Object].
Related weaknesses· 7
Related attack patterns· 1
Exploits7
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')cwe-74 | 100% | live |
| Weakness | Incorrect Comparisoncwe-697 | 100% | live |
| Weakness | Improper Handling of Alternate Encodingcwe-173 | 100% | live |
| Weakness | Improper Neutralizationcwe-707 | 100% | live |
| Weakness | Improper Input Validationcwe-20 | 100% | live |
| Weakness | Improper Neutralization of Null Byte or NUL Charactercwe-158 | 100% | live |
| Weakness | Encoding Errorcwe-172 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.