Back to the previous page

Test Case ID	123323
Bad / Good / Mixed	Mixed
Author	NSA/Center for Assured Software
Associations	Test suite: 86 108
Added by	Charles Oliveira
Language	C
Type of test case	Source Code
Input string
Expected Output
Instructions
Submission date	2013-05-21
Description	CWE: 90 LDAP Injection BadSource: listen_socket Read data using a listen socket (server side) GoodSource: Use a fixed string Sinks: BadSink : data concatenated into LDAP search, which could result in LDAP Injection Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference
File(s)	CWE90_LDAP_Injection__w32_wchar_t_listen_socket_81.h (1.28 kB) CWE90_LDAP_Injection__w32_wchar_t_listen_socket_81_bad.cpp (2.71 kB) CWE90_LDAP_Injection__w32_wchar_t_listen_socket_81_goodG2B.cpp (2.72 kB) CWE90_LDAP_Injection__w32_wchar_t_listen_socket_81a.cpp (5.18 kB) io.c (5.3 kB) std_testcase.h (3.91 kB) std_testcase_io.h (1.42 kB)
Flaw	CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') • 1

There are no comments

Have any comments on this test case? Please, .

File Contains:
CWE-090: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') on line(s): 51