CWE-69

Improper Handling of Windows ::DATA Alternate Data Stream

High

Description

The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).

Potential Impact

Access Control: Bypass Protection Mechanism

How to Fix

Implementation

Ensure that the source code correctly parses the filename to read or write to the correct stream.

Detection Methods

Automated Analysis: Software tools are capable of finding ADSs on your system....

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-69 vulnerabilities in your codebase.

Get Security Assessment