Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

...

CERT C++ Secure Coding StandardFIO15-CPP. Ensure that file operations are performed in a secure directory
MITRE CWECWE-379, Creation of temporary file in directory with insecure permissions
CWE-552, Files or directories accessible to external parties

Bibliography

[Open Group 2004IEEE Std 1003.1:2013]XSH, System Interfaces, dirname()
XSH, System Interfaces, realpath()
[Viega 2003]Section 2.4, "Determining Whether a Directory Is Secure"

...