Path Manipulation - Revision history

Andrew Smith: Redirected page to Path Traversal

2015-10-06T18:43:37Z

Redirected page to Path Traversal

2009-04-23T11:47:48Z

2009-04-07T23:33:54Z

2009-02-16T13:56:03Z

2008-09-14T21:51:19Z

2008-09-14T01:35:10Z

2008-09-13T22:53:52Z

2007-11-05T16:32:57Z

2007-11-05T14:28:33Z

‎Abstract

2007-10-03T13:56:21Z

@@ Line 1: / Line 1: @@
 {{Template:Attack}}
 <br>
@@ Line 61: / Line 62: @@
 [[Category:Injection Attack]]

← Older revision		Revision as of 11:47, 23 April 2009
Line 3:		Line 3:
	[[Category:OWASP ASDR Project]]		[[Category:OWASP ASDR Project]]

		+
		+	Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

	==Description==		==Description==

@@ Line 2: / Line 2: @@
 <br>
 [[Category:OWASP ASDR Project]]
-[[ASDR Table of Contents]]__TOC__
+[[ASDR Table of Contents]]
 ==Description==
 Path manipulation errors occur when the following two conditions are met:
@@ Line 16: / Line 15: @@
 ==Risk Factors==
 TBD
 ==Examples ==
@@ Line 62: / Line 60: @@
 [[Category:Injection Attack]]
 [[Category:Attack]]

@@ Line 43: / Line 43: @@
 ==Related [[Threat Agents]]==
 * [[:Category:Information Disclosure]]
 ==Related [[Attacks]]==

@@ Line 42: / Line 42: @@
 ==Related [[Threat Agents]]==
 * [[:Category:Information Disclosure]]
 ==Related [[Attacks]]==
-*[[Resource Injection]]
+* [[Resource Injection]]
-*[[Relative Path Traversal]]
+* [[Relative Path Traversal]]
 ==Related [[Vulnerabilities]]==
@@ Line 54: / Line 53: @@
 ==Related [[Controls]]==
 * [[:Category:Input Validation]]
 ==Credit==

@@ Line 1: / Line 1: @@
 {{Template:Attack}}
 ==Description==
@@ Line 13: / Line 8: @@
 # By specifying the resource, the attacker gains a capability that would not otherwise be permitted. For example, the program may give the attacker the ability to overwrite the specified file or run with a configuration controlled by the attacker.
 ==Examples ==
@@ Line 26: / Line 30: @@
 	rFile.delete();
 </pre>
 ===Example 2===
@@ Line 37: / Line 40: @@
 	out.println(arr);
 </pre>
 ==Related Threats==
 [[:Category:Information Disclosure]]
 ==Related Attacks==
 *[[Resource Injection]]
 *[[Relative Path Traversal]]
 ==Related Vulnerabilities==
 [[:Category:Input Validation Vulnerability]]
 ==Related Countermeasures==
 [[:Category:Input Validation]]
-==Categories==
+[[Category:Injection Attack]]
-[[:Category: Resource Manipulation]]
+[[Category:Attack]]

@@ Line 4: / Line 4: @@
 ==Abstract==
-Allowing user input to control paths used in filesystem operations may enable an attacker to access or modify otherwise protected system resources.
+Allowing user input to control paths used in filesystem operations may enable an attacker to access or modify  protected system resources.
 ==Description==