CWE-743
Grouping ProhibitedCERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO)
Status: Obsolete
Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) chapter of the CERT C Secure Coding Standard (2008).
Grouping entries organize the catalogue and should not be used to map the root cause of a vulnerability.
Mapping guidance
This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
Relationships and members
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:
CWE-22 FIO02-C Canonicalize path names originating from untrusted sources
CWE-37 FIO05-C Identify files using multiple file attributes
CWE-38 FIO05-C Identify files using multiple file attributes
CWE-39 FIO05-C Identify files using multiple file attributes
CWE-41 FIO02-C Canonicalize path names originating from untrusted sources
CWE-59 FIO02-C Canonicalize path names originating from untrusted sources
CWE-62 FIO05-C Identify files using multiple file attributes
CWE-64 FIO05-C Identify files using multiple file attributes
CWE-65 FIO05-C Identify files using multiple file attributes
CWE-67 FIO32-C Do not perform operations on devices that are only appropriate for files
CWE-119 FIO37-C Do not assume character data has been read
CWE-134 FIO30-C Exclude user input from format strings
CWE-134 FIO30-C Exclude user input from format strings
CWE-241 FIO37-C Do not assume character data has been read
CWE-276 FIO06-C Create files with appropriate access permissions
CWE-279 FIO06-C Create files with appropriate access permissions
CWE-362 FIO31-C Do not simultaneously open the same file multiple times
CWE-367 FIO01-C Be careful using functions that use file names for identification
CWE-379 FIO15-C Ensure that file operations are performed in a secure directory
CWE-379 FIO43-C Do not create temporary files in shared directories
CWE-391 FIO04-C Detect and handle input and output errors
CWE-391 FIO33-C Detect and handle input output errors resulting in undefined behavior
CWE-403 FIO42-C Ensure files are properly closed when they are no longer needed
CWE-404 FIO42-C Ensure files are properly closed when they are no longer needed
CWE-552 FIO15-C Ensure that file operations are performed in a secure directory
CWE-675 FIO31-C Do not simultaneously open the same file multiple times
CWE-676 FIO01-C Be careful using functions that use file names for identification
CWE-686 FIO00-C Take care when creating format strings
CWE-732 FIO06-C Create files with appropriate access permissions
Content history
updated Relationships
updated Description, Name, Relationship_Notes
updated Description, Name, References
updated Mapping_Notes
updated Mapping_Notes
updated Mapping_Notes, Type
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.