CWE-69—Improper Handling of Windows ::DATA Alternate Data Stream

名称

Improper Handling of Windows ::DATA Alternate Data Stream

描述

The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).

An attacker can use an ADS to hide information about a file (e.g. size, the name of the process) from a system or file browser tools such as Windows Explorer and 'dir' at the command line utility. Alternately, the attacker might be able to bypass intended access restrictions for the associated data fork.

常见后果

范围：

Access Control, Non-Repudiation, Other

影响：

Bypass Protection Mechanism, Hide Activities, Other

相关 CWE

• CWE-66Improper Handling of File Names that Identify Virtual Resources