Setting Manipulation - Revision history

KirstenS at 11:50, 23 April 2009

2009-04-23T11:50:57Z

KirstenS at 22:55, 7 April 2009

2009-04-07T22:55:10Z

KirstenS at 00:54, 17 February 2009

2009-02-17T00:54:04Z

KirstenS: /* Related Vulnerabilities */

2008-09-15T11:57:29Z

‎Related Vulnerabilities

KirstenS: /* Example 2 – Block Access to Libraries */

2008-09-15T11:57:06Z

‎Example 2 – Block Access to Libraries

KirstenS: /* Example 1 */

2008-09-15T11:54:36Z

‎Example 1

KirstenS: /* Description */

2008-09-15T11:53:37Z

‎Description

KirstenS at 00:35, 14 September 2008

2008-09-14T00:35:16Z

Nsrav: /* Related Vulnerabilities */

2007-11-05T19:47:31Z

‎Related Vulnerabilities

Nsrav at 17:26, 5 November 2007

2007-11-05T17:26:26Z

@@ Line 2: / Line 2: @@
 <br>
 [[Category:OWASP ASDR Project]]
 ==Description==

@@ Line 2: / Line 2: @@
 <br>
 [[Category:OWASP ASDR Project]]
 ==Description==

@@ Line 2: / Line 2: @@
 <br>
 [[Category:OWASP ASDR Project]]
-[[ASDR Table of Contents]]__TOC__
+[[ASDR Table of Contents]]
 ==Description==
 This attack aims to modify application settings in order to cause misleading data or advantages on the attacker's behalf. He may manipulate values in the system and manage specific user resources of the application or affect its functionalities.
 An attacker can exploit several functionalities of the application using this attack technique, but it would not possible to describe all the ways of exploration, due to innumerable options that attacker may use to control the system values.
-Using this attack technique, it is possible to manipulate settings by changing the application functions, such as calls to the database, blocking access to external libraries and/or modification log files.
+Using this attack technique, it is possible to manipulate settings by changing the application functions, such as calls to the database, blocking access to external libraries, and/or modification log files.
 == Risk Factors==
 TBD

@@ Line 49: / Line 49: @@
 ==Related [[Vulnerabilities]]==
-* [[:Category:General_Logic_Error_Vulnerability]]
+* [[:Category:General Logic Error Vulnerability]]
 ==Related [[Controls]]==

@@ Line 34: / Line 34: @@
 ===Example 2 – Block Access to Libraries ===
-The attacker has the privileges to block application access to external libraries to execute this attack. It is necessary discover what external libraries are accessed by application and block it. The attacker needs to observe if behavior of the system goes into an insecure/inconsistent state.
+The attacker has the privileges to block application access to external libraries to execute this attack. It is necessary to discover what external libraries are accessed by the application and block them. The attacker needs to observe if the behavior of the system goes into an insecure/inconsistent state.
-In this case the application uses a third party cryptographic random number generation library that used in generation of user session ids. An attacker may block to access this library by renaming it.
+In this case the application uses a third party cryptographic random number generation library to generate user Session IDs. An attacker may block access to this library by renaming it.
-Then an application will be use the weak pseudo random number generation library. The attacker can use this weakness to predict the session id user, he/she attempts to perform elevation of privilege escalation and gains access user’s account.
+Then the application will use the weak pseudo random number generation library. The attacker can use this weakness to predict the Session ID user; he/she attempts to perform elevation of privilege escalation and gains access to the user's account.
 For more details about this attack, see:

@@ Line 21: / Line 21: @@
 ===Example 1 ===
-An attacker needs to identify the variables without input validation or improperly encapsulated to obtain success in the attack.
+An attacker needs to identify the variables without input validation or those improperly encapsulated to obtain success in the attack.
-The following example was based on the ones found in the Individual CWE Dictionary Definition (Setting Manipulation-15).
+The following example was based on those found in the Individual CWE Dictionary Definition (Setting Manipulation-15).
 Consider the following piece of Java code:
@@ Line 30: / Line 30: @@
    ...
-This fragment reads the string “catalog” from “HttpServletRequest” and sets it as the active catalog for a database connection. An attacker could manipulate this information and cause connection error or unauthorized access to other catalogs.
+This fragment reads the string “catalog” from “HttpServletRequest” and sets it as the active catalog for a database connection. An attacker could manipulate this information and cause a connection error or unauthorized access to other catalogs.
 ===Example 2 – Block Access to Libraries ===

@@ Line 1: / Line 1: @@
 {{Template:Attack}}
 ==Description==
@@ Line 9: / Line 12: @@
 Using this attack technique, it is possible to manipulate settings by changing the application functions, such as calls to the database, blocking access to external libraries and/or modification log files.
-== Severity ==
+== Risk Factors==
 ==Example==
@@ Line 43: / Line 43: @@
 http://capec.mitre.org/data/definitions/96.html
-==External References==
+==Related [[Threat Agents]]==
+* [[:Category: Logical Attacks]]
-==Related Vulnerabilities==
+==Related [[Attacks]]==
 * [[:Category:General_Logic_Error_Vulnerability]]
-==Related Countermeasures==
+==Related [[Controls]]==
-*[[:Category: Error Handling]]
+==References==

@@ Line 9: / Line 9: @@
 Using this attack technique, it is possible to manipulate settings by changing the application functions, such as calls to the database, blocking access to external libraries and/or modification log files.
 ==Example==
-===Example1 ===
+===Example 1 ===
 An attacker needs to identify the variables without input validation or improperly encapsulated to obtain success in the attack.
@@ Line 35: / Line 42: @@
 For more details about this attack, see:
 http://capec.mitre.org/data/definitions/96.html
 ==External References==
@@ Line 44: / Line 50: @@
 http://capec.mitre.org/data/definitions/96.html - Block Access to Libraries
 ==Related Threats==
 [[:Category: Logical Attacks]]
 ==Related Attacks==
 *[[Denial of Service]]
 ==Related Vulnerabilities==
 * [[:Category:Input General Logic Error Vulnerability]]
 ==Related Countermeasures==
@@ Line 66: / Line 68: @@
-==Categories==
+[[Category: Resource Manipulation]]
-[[:Category: Resource Manipulation]]
+[[Category: Attack]]