Difference between revisions of "Failure to add integrity check value"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to s1.shard.jp)
 
(5 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[http://s1.shard.jp/olharder/automation-control.html auto mileage logs
 
] [http://s1.shard.jp/bireba/pc-world-antivirus.html avg antivirus key generator
 
] [http://s1.shard.jp/bireba/error-1920service.html mcafee antivirus programs
 
] [http://s1.shard.jp/galeach/new73.html asianhotgirls
 
] [http://s1.shard.jp/losaul/australian-vets.html 2006 australian open tennis tickets
 
] [http://s1.shard.jp/olharder/auto-recreational.html european auto part at discount prices
 
] [http://s1.shard.jp/bireba/antivirus-freeware.html nortan antivirus 2005 serial key
 
] [http://s1.shard.jp/bireba/www-avg-antivirus.html antivirus software for download
 
] [http://s1.shard.jp/olharder/autoroll-654.html domain] [http://s1.shard.jp/galeach/new81.html asian charm
 
] [http://s1.shard.jp/olharder/autoroll-654.html url] [http://s1.shard.jp/bireba/install-software.html 64 bit antivirus software
 
] [http://s1.shard.jp/bireba/antivirus-software.html kaspersky antivirus personal pro 5.0.19
 
] [http://s1.shard.jp/bireba/2005-antivirus.html 2005 antivirus software] [http://s1.shard.jp/olharder/auto-ordance.html automatically restart services
 
] [http://s1.shard.jp/galeach/map.html accommodation asian reservation secure travel] [http://s1.shard.jp/losaul/digital-broadcasting.html toyota land cruiser australia
 
] [http://s1.shard.jp/losaul/compare-flights.html australian german shepherd puppy
 
] [http://s1.shard.jp/losaul/australia-funniest.html australia hunter valley
 
] [http://s1.shard.jp/bireba/mobile-antivirus.html mobile antivirus software] [http://s1.shard.jp/olharder/automation-expense.html economy auto inc
 
] [http://s1.shard.jp/olharder/collective-unconscious.html collective unconscious autonomic nervous system] [http://s1.shard.jp/galeach/new45.html actress asian pic
 
] [http://s1.shard.jp/galeach/new107.html asian musclemen
 
] [http://s1.shard.jp/losaul/alzeihmers-australia.html know about australia
 
] [http://s1.shard.jp/galeach/new66.html sexy asia carrera
 
] [http://s1.shard.jp/olharder/automotive-design.html playstation 2 cheats grand theft auto
 
] [http://s1.shard.jp/frhorton/tnw2399fu.html history of african sleeping sickness
 
] [http://s1.shard.jp/olharder/autoroll-654.html link] [http://s1.shard.jp/olharder/car-ezautoshippersnet.html sears automotive store hours
 
] [http://s1.shard.jp/olharder/history-of-automobile.html autotaser
 
] [http://s1.shard.jp/bireba/antivirus-windows.html norton antivirus keygen 2005
 
] [http://s1.shard.jp/bireba/antivirus-software.html microsoft buys antivirus company
 
] [http://s1.shard.jp/losaul/australian-census.html john olsen australian painter
 
] [http://s1.shard.jp/bireba/norton-antivirus.html antivirus exe
 
] [http://s1.shard.jp/bireba/norton-antivirus.html 2006 winantivirus
 
] [http://s1.shard.jp/losaul/map.html 1983 australian male open winner
 
] [http://s1.shard.jp/olharder/autoroll-654.html index] [http://s1.shard.jp/bireba/top-antivirus.html antivirus for macintosh
 
] [http://s1.shard.jp/frhorton/i13wxjnjb.html african american art gallery] [http://s1.shard.jp/frhorton/rqxyy3ubg.html mauna loa african violet
 
] [http://s1.shard.jp/frhorton/9rxlvcl6n.html weather services south africa] [http://s1.shard.jp/bireba/antivirus-trials.html symantec antivirus liveupdate error
 
] [http://s1.shard.jp/olharder/autoextracom.html watters auto
 
] [http://s1.shard.jp/losaul/rowing-clothing.html australia computer hp
 
] [http://s1.shard.jp/olharder/autoroll-654.html url] [http://s1.shard.jp/galeach/new174.html gaping asian holes
 
] [http://s1.shard.jp/losaul/ australian education international aei
 
] [http://s1.shard.jp/frhorton/lmi1tnyfh.html africa massage prostate south
 
] [http://s1.shard.jp/olharder/automobile-bmw.html auto bc trader vancouver
 
 
http://www.textpaseltl.com
 
 
{{Template:Vulnerability}}
 
{{Template:Vulnerability}}
 
{{Template:SecureSoftware}}
 
{{Template:SecureSoftware}}

Latest revision as of 07:50, 3 June 2009

This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.



Last revision (mm/dd/yy): 06/3/2009

Vulnerabilities Table of Contents

Description

If integrity check values or "checksums" are omitted from a protocol, there is no way of determining if data has been corrupted in transmission.

Consequences

  • Integrity: Data that is parsed and used may be corrupted.
  • Non-repudiation: Without a checksum it is impossible to determine if any changes have been made to the data after it was sent.

Exposure period

  • Design: Checksums are an aspect of protocol design and should be handled there.
  • Implementation: Checksums must be properly created and added to the messages in the correct manner to ensure that they are correct when sent.

Platform

  • Languages: All
  • Platforms: All

Required resources

Network proximity: Some ability to inject messages into a stream, or otherwise corrupt network traffic, would be required to capitalize on this flaw.

Severity

High

Likelihood of exploit

Medium

The failure to include checksum functionality in a protocol removes the first application-level check of data that can be used. The end-to-end philosophy of checks states that integrity checks should be performed at the lowest level that they can be completely implemented. Excluding further sanity checks and input validation performed by applications, the protocol's checksum is the most important level of checksum, since it can be performed more completely than at any previous level and takes into account entire messages, as opposed to single packets.

Failure to add this functionality to a protocol specification, or in the implementation of that protocol, needlessly ignores a simple solution for a very significant problem and should never be skipped.


Risk Factors

TBD

Examples

In C/C++:

int r,s;
struct hostent *h;
struct sockaddr_in rserv,lserv;
h=gethostbyname("127.0.0.1");
rserv.sin_family=h->h_addrtype;
memcpy((char *) &rserv.sin_addr.s_addr, h->h_addr_list[0]
  ,h->h_length);
rserv.sin_port= htons(1008);
s = socket(AF_INET,SOCK_DGRAM,0);

lserv.sin_family = AF_INET;
lserv.sin_addr.s_addr = htonl(INADDR_ANY);
lserv.sin_port = htons(0);

r = bind(s, (struct sockaddr *) &lserv,sizeof(lserv));
sendto(s,important_data,strlen(improtant_data)+1,0
   ,(struct sockaddr *) &rserv, sizeof(rserv));

In Java:

while(true) {
  DatagramPacket rp=new DatagramPacket(rData,rData.length);
         
  outSock.receive(rp);
  String in = new String(p.getData(),0, rp.getLength());
  InetAddress IPAddress = rp.getAddress();
  int port = rp.getPort();
          
    out = secret.getBytes();
    DatagramPacket sp =new DatagramPacket(out,out.length,
      IPAddress, port);
    outSock.send(sp);
  }  
}


Related Attacks


Related Vulnerabilities


Related Controls

  • Design: Add an appropriately sized checksum to the protocol, ensuring that data received may be simply validated before it is parsed and used.
  • Implementation: Ensure that the checksums present in the protocol design are properly implemented and added to each message before it is sent.


Related Technical Impacts


References

TBD