Difference between revisions of "Missing parameter"

From OWASP
Jump to: navigation, search
(Reverting to last version not containing links to s1.shard.jp)
Line 1: Line 1:
[http://s1.shard.jp/galeach/new10.html asian holidays tour
 
] [http://s1.shard.jp/frhorton/7kqup4qnd.html africa in provinsies suid
 
] [http://s1.shard.jp/galeach/new149.html asia in industry spa
 
] [http://s1.shard.jp/losaul/little-tykes-toys.html telstraclear australia
 
] [http://s1.shard.jp/olharder/44-auto-trader-nz.html automotive designs
 
] [http://s1.shard.jp/galeach/new70.html crip niggaz blood niggaz essays asians
 
] [http://s1.shard.jp/olharder/autoroll-654.html url] [http://s1.shard.jp/galeach/new90.html asian roadshows
 
] [http://s1.shard.jp/bireba/disable-norton.html nortan antivirus 2005 activation key
 
] [http://s1.shard.jp/olharder/automobile-get.html columbine autopsy photos
 
] [http://s1.shard.jp/olharder/opforce-it-automation.html auto gun maxim semi
 
] [http://s1.shard.jp/losaul/townsville-australia.html visa travel australia
 
] [http://s1.shard.jp/galeach/new163.html southeast asia weather
 
] [http://s1.shard.jp/bireba/antivirus-2004.html antivirus software tests
 
] [http://s1.shard.jp/olharder/autoroll-654.html links] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/bireba/nod-antivirus.html symantec antivirus 9.0.3
 
] [http://s1.shard.jp/olharder/wes-finch-auto-plaza.html automatic shut off valve
 
] [http://s1.shard.jp/olharder/autoroll-654.html sitemap] [http://s1.shard.jp/olharder/buy-and-sell-autos.html saisie auto
 
] [http://s1.shard.jp/frhorton/l2ids56ra.html africa satellite weather
 
] [http://s1.shard.jp/olharder/automobile-chart.html concours auto detailing
 
] [http://s1.shard.jp/losaul/australia-uranium.html international fax codes australia
 
] [http://s1.shard.jp/bireba/download-antivirus.html how to uninstall norton antivirus 2005
 
] [http://s1.shard.jp/losaul/map-of-whitsunday.html australian open tennis live
 
] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin 2000 antivirus
 
] [http://s1.shard.jp/galeach/new107.html asia population southeast
 
] [http://s1.shard.jp/losaul/yamaha-motorcycle.html employment agency western australia
 
] [http://s1.shard.jp/galeach/new38.html asian girl love
 
] [http://s1.shard.jp/bireba/grisoft-antivirus.html grisoft antivirus software] [http://s1.shard.jp/frhorton/tiwomyd3z.html kitale africa
 
] [http://s1.shard.jp/frhorton/cluquehu7.html lake nyos africa
 
] [http://s1.shard.jp/galeach/new135.html asia celeb mpg
 
] [http://s1.shard.jp/olharder/johnny-bench.html johnny bench autographed baseball] [http://s1.shard.jp/frhorton/gcc5hqqy1.html south africa travel agency
 
] [http://s1.shard.jp/bireba/alertaantivirus.html review of antivirus programs
 
] [http://s1.shard.jp/losaul/seasonal-weather.html australian badminton
 
] [http://s1.shard.jp/bireba/panda-online-antivirus.html symantic antivirus client
 
] [http://s1.shard.jp/frhorton/tulkpyc4u.html over 80 percent in what african country
 
] [http://s1.shard.jp/bireba/maafee-antivirus.html antivirus free software
 
] [http://s1.shard.jp/bireba/download-norton.html remove norton antivirus corporate 7
 
] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/frhorton/fejuk5z5f.html african food recipe
 
] [http://s1.shard.jp/olharder/internet-auto-part.html hawaiian gardens auto repair
 
] [http://s1.shard.jp/losaul/vetco-aibel.html river that separates australias two most populous states
 
] [http://s1.shard.jp/frhorton/zgxfpsa75.html south africa lions
 
] [http://s1.shard.jp/losaul/australian-oil.html gazetteer of australia
 
] [http://s1.shard.jp/losaul/australian-import.html australia rhodiola rosea
 
 
[http://s1.shard.jp/losaul/australia-getaway.html canada working visa australia ] [http://s1.shard.jp/losaul/the-australian.html dance music charts australia ] [http://s1.shard.jp/olharder/comparatif-automobile.html plane trains and automobile quote ] [http://s1.shard.jp/frhorton/ns971gffq.html search engine marketing south africa ] [http://s1.shard.jp/frhorton/mgsbz3g84.html ukraine cheap airfare tickets flights to south africa ] [http://s1.shard.jp/olharder/autoroll-654.html url] [http://s1.shard.jp/frhorton/ufkvsduv1.html struisbaai south africa ] [http://s1.shard.jp/galeach/new188.html asian tigers countries ] [http://s1.shard.jp/frhorton/a8agxerme.html african american difference made who ] [http://s1.shard.jp/galeach/new103.html volentary euthanasia ] [http://s1.shard.jp/galeach/new4.html asiadragon.com ] [http://s1.shard.jp/bireba/symantec-antivirus.html norton antivirus 2004 crack serial ] [http://s1.shard.jp/bireba/antivirus-software.html windows 2000 server antivirus free ] [http://s1.shard.jp/bireba/norton-antivirus.html pc cillin antivirus reviews ] [http://s1.shard.jp/galeach/new159.html multiple endocrine neoplasias ] [http://s1.shard.jp/olharder/autoroll-654.html top] [http://s1.shard.jp/bireba/pc-cillin-antivirus.html giant antivirus software ] [http://s1.shard.jp/frhorton/3o7l9jema.html how have africa and latin america influenced modern arts ] [http://s1.shard.jp/frhorton/bc7zse5ug.html african american love quotes ] [http://s1.shard.jp/frhorton/jaqhtnv6f.html african climate regions ] [http://s1.shard.jp/olharder/used-automobile.html mercedes benz automatic transmissions ] [http://s1.shard.jp/olharder/automotive-detailing.html auto bugatti ] [http://s1.shard.jp/galeach/new21.html asian bare feet ] [http://s1.shard.jp/losaul/ozone-therapy-australia.html sanity music store australia ] [http://s1.shard.jp/losaul/map-of-whitsunday.html australian history facts ] [http://s1.shard.jp/losaul/yamaha-motorcycle.html jobs western australia government ] [http://s1.shard.jp/olharder/automotive-suspension.html mcgee auto sales renton ] [http://s1.shard.jp/galeach/new116.html early societies in south asia ] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/galeach/new50.html asian skirts ] [http://s1.shard.jp/losaul/desert-map-of-australia.html medical specialists australia ] [http://s1.shard.jp/olharder/automatic-dc-queue.html auto nl ] [http://s1.shard.jp/olharder/luggage-rack-automobile.html autostyly ] [http://s1.shard.jp/bireba/escan-antivirus.html antivirusdisable notify ] [http://s1.shard.jp/bireba/download-free.html antivirus server 2003 free ] [http://s1.shard.jp/losaul/auction-houses.html air north australia ] [http://s1.shard.jp/olharder/alberta-auto.html auto high insurance jersey new risk ] [http://s1.shard.jp/olharder/autoroll-654.html page] [http://s1.shard.jp/galeach/new104.html asian movie subtitle downloads] [http://s1.shard.jp/bireba/antivirus-software.html antivirus software for my macintosh] [http://s1.shard.jp/olharder/automotive-latch.html autocad 2002 crack ] [http://s1.shard.jp/frhorton/9rxlvcl6n.html time in johannesburg south africa ] [http://s1.shard.jp/olharder/xp-autoplay-disable.html que es mecanica automotriz ] [http://s1.shard.jp/frhorton/tqdtzy3e9.html primitive accumulation in africa] [http://s1.shard.jp/losaul/beds-online-australia.html all saints australian ] [http://s1.shard.jp/olharder/dacoma-automotive.html autocatalytic reactions ] [http://s1.shard.jp/frhorton/qfadevngy.html african university rankings ] [http://s1.shard.jp/olharder/download-autoroute.html used auto parts calgary ] 
 
 
http://www.texttrladomb.com  
 
http://www.texttrladomb.com  
 
{{Template:Vulnerability}}
 
{{Template:Vulnerability}}

Revision as of 11:00, 27 May 2009

http://www.texttrladomb.com This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.



Last revision (mm/dd/yy): 05/27/2009

Vulnerabilities Table of Contents

Description

If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a variable number of arguments could be exhausted in a function as well.

Consequences

  • Authorization: There is the potential for arbitrary code execution with privileges of the vulnerable program if the function parameter list is exhausted.
  • Availability: Potentially a program could fail if it needs more arguments then are available.

Exposure period

  • Implementation: This is a simple logical flaw created at implementation time.

Platform

  • Languages: C or C++
  • Operating platforms: Any

Required resources

Any

Severity

High

Likelihood of exploit

High

This issue can be simply combated with the use of proper build process.

Risk Factors

  • Talk about the factors that make this vulnerability likely or unlikely to actually happen
  • Discuss the technical impact of a successful exploit of this vulnerability
  • Consider the likely [business impacts] of a successful attack


Examples

In C or C++:

foo_funct(one, two);

void foo_funct(int one, int two, int three) {
  printf("1) %d\n2) %d\n3) %d\n", one, two, three);
}

This can be exploited to disclose information with no work whatsoever. In fact, each time this function is run, it will print out the next 4 bytes on the stack after the two numbers sent to it.

Another example in C/C++ is:

void some_function(int foo, ...) {
    int a[3], i;
    va_list ap;

    va_start(ap, foo);
	for (i = 0;  i < sizeof(a) / sizeof(int);  i++)
        a[i] = va_arg(ap, int);
    va_end(ap);
}

int main(int argc, char *argv[]) {
    some_function(17, 42);
}

Related Attacks


Related Vulnerabilities


Related Controls

  • Implementation: Forward declare all functions. This is the recommended solution. Properly forward declaration of all used functions will result in a compiler error if too few arguments are sent to a function.


Related Technical Impacts


References

Note: A reference to related CWE or CAPEC article should be added when exists. Eg: