�ｿｽy�ｿｽ�ｿｽ�ｿｽp�ｿｽK�ｿｽC�ｿｽh�ｿｽz

CWE-264

Category ID:264(Category)

Status: Incomplete

�ｿｽF�ｿｽﾂ・�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽE�ｿｽA�ｿｽN�ｿｽZ�ｿｽX�ｿｽ�ｿｽ�ｿｽ�ｿｽ

�ｿｽ�ｿｽ�ｿｽ

�ｿｽ�ｿｽ�ｿｽ�ｿｽv�ｿｽ�ｿｽ

�ｿｽ�ｿｽ�ｿｽﾌカ�ｿｽe�ｿｽS�ｿｽ�ｿｽ�ｿｽﾌ脆弱性�ｿｽﾍ、�ｿｽA�ｿｽN�ｿｽZ�ｿｽX�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉ暦ｿｽ�ｿｽp�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽA�ｿｽF�ｿｽﾂ、�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽy�ｿｽﾑゑｿｽ�ｿｽﾌ托ｿｽ�ｿｽﾌセ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ@�ｿｽ\�ｿｽﾉ関連�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾌでゑｿｽ�ｿｽB

�ｿｽY�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽv�ｿｽ�ｿｽ�ｿｽb�ｿｽg�ｿｽt�ｿｽH�ｿｽ[�ｿｽ�ｿｽ

�ｿｽ�ｿｽ�ｿｽ�ｿｽ

�ｿｽS�ｿｽ�ｿｽ

�ｿｽ�ｿｽQ�ｿｽﾌ緩和�ｿｽ�ｿｽ

�ｿｽ\�ｿｽt�ｿｽg�ｿｽE�ｿｽF�ｿｽA�ｿｽ�ｿｽ�ｿｽﾌエ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽe�ｿｽB�ｿｽﾉア�ｿｽN�ｿｽZ�ｿｽX�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽt�ｿｽ^�ｿｽ�ｿｽ�ｿｽ�ｿｽ鼾��ｿｽA�ｿｽﾅ擾ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾌ鯉ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ轤ｵ�ｿｽﾄ会ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽB

�ｿｽﾖ係�ｿｽ�ｿｽ

 

Nature Type ID Name View(s) this relationship pertains to
ChildOf Category 254 Security Features Development Concepts (primary)699
ParentOf Weakness Class 250 Execution with Unnecessary Privileges Development Concepts699
ParentOf Category 265 Privilege / Sandbox Issues Development Concepts (primary)699
ParentOf Category 275 Permission Issues Development Concepts (primary)699
ParentOf Weakness Class 282 Improper Ownership Management Development Concepts (primary)699
ParentOf Weakness Class 284 Access Control (Authorization) Issues Development Concepts (primary)699
ParentOf Weakness Class 286 Incorrect User Management Development Concepts (primary)699
MemberOf View 635 Weaknesses Used by NVD Weaknesses Used by NVD (primary)635
CanAlsoBe Weakness Base 283 Unverified Ownership Research Concepts1000

 

�ｿｽ�ｿｽ�ｿｽg�ｿｽD�ｿｽﾅの包ｿｽ�ｿｽ�ｿｽ

 

�ｿｽg�ｿｽD�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽﾍ組�ｿｽD�ｿｽﾅの包ｿｽ�ｿｽ�ｿｽ �ｿｽm�ｿｽ[�ｿｽh ID CWE�ｿｽﾌ包ｿｽ�ｿｽﾞとの適�ｿｽ�ｿｽ�ｿｽx �ｿｽ�ｿｽ�ｿｽﾞ厄ｿｽ
PLOVER Permissions, Privileges, and ACLs

 

�ｿｽﾖ連�ｿｽ�ｿｽ�ｿｽ�ｿｽU�ｿｽ�ｿｽ�ｿｽp�ｿｽ^�ｿｽ[�ｿｽ�ｿｽ

 

CAPEC-ID �ｿｽU�ｿｽ�ｿｽ�ｿｽp�ｿｽ^�ｿｽ[�ｿｽ�ｿｽ�ｿｽ�ｿｽ (CAPEC Version 1.5)
5 Analog In-band Switching Signals (aka Blue Boxing)
17 Accessing, Modifying or Executing Executable Files
35 Leverage Executable Code in Nonexecutable Files
58 Restful Privilege Elevation
69 Target Programs with Elevated Privileges
76 Manipulating Input to File System Calls

 

�ｿｽQ�ｿｽ�ｿｽ

[REF-11] M. Howard and D. LeBlanc. "Writing Secure Code". Chapter 7, "How Tokens, Privileges, SIDs, ACLs, and Processes Relate" Page 218. 2nd Edition. Microsoft. 2002. 

�ｿｽX�ｿｽV�ｿｽ�ｿｽ�ｿｽ�ｿｽ

[2011�ｿｽN04�ｿｽ�ｿｽ21�ｿｽ�ｿｽ]
  2010�ｿｽN10�ｿｽ�ｿｽ12�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ_�ｿｽﾌデ�ｿｽ[�ｿｽ^�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉ更�ｿｽV
[2009�ｿｽN06�ｿｽ�ｿｽ29�ｿｽ�ｿｽ]
  2009�ｿｽN02�ｿｽ�ｿｽ02�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ_�ｿｽﾌ会ｿｽ�ｿｽL URL �ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉ作成
    http://cwe.mitre.org/data/definitions/264.html

�ｿｽo�ｿｽ^�ｿｽ�ｿｽ 2011/04/21

�ｿｽﾅ終�ｿｽX�ｿｽV�ｿｽ�ｿｽ 2023/04/04

OSZAR »