Detailedlikelihood: Highseverity: HighDraft
CAPEC-53Postfix, Null Terminate, and Backslash
Abstraction
Detailed
Status
Draft
Likelihood
High
Severity
High
Description
If a string is passed through a filter of some kind, then a terminal NULL may not be valid. Using alternate representation of NULL allows an adversary to embed the NULL mid-string while postfixing the proper data so that the filter is avoided. One example is a filter that looks for a trailing slash character. If a string insertion is possible, but the slash must exist, an alternate encoding of NULL in mid-string may be used.
Related weaknesses· 7
Related attack patterns· 1
Exploits7
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Neutralizationcwe-707 | 100% | live |
| Weakness | Incorrect Comparisoncwe-697 | 100% | live |
| Weakness | Encoding Errorcwe-172 | 100% | live |
| Weakness | Improper Input Validationcwe-20 | 100% | live |
| Weakness | Improper Handling of Alternate Encodingcwe-173 | 100% | live |
| Weakness | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')cwe-74 | 100% | live |
| Weakness | Improper Neutralization of Null Byte or NUL Charactercwe-158 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.