CAPEC-52: Embedding NULL Bytes

Description
An adversary embeds one or more null bytes in input to the target software. This attack relies on the usage of a null-valued byte as a string terminator in many environments. The goal is for certain components of the target software to stop processing the input when it encounters the null byte(s).
Extended Description

WS-Addressing is used to virtualize services, provide return addresses and other routing information, however, unless the WS-Addressing headers are protected they are vulnerable to rewriting. Content in a registry is deployed by the service provider. The registry in an SOA or Web Services system can be accessed by the service requester via UDDI or other protocol.

Severity :

High

Possibility :

High

Type :

Detailed
Relationships with other CAPECs

This table shows the other attack patterns and high level categories that are related to this attack pattern.

CAPEC-267: Leverage Alternate Encoding Leverage Alternate Encoding
Prerequisites

This table shows the other attack patterns and high level categories that are related to this attack pattern.

  • The program does not properly handle postfix NULL terminators
Skills required

This table shows the other attack patterns and high level categories that are related to this attack pattern.

  • Medium Directory traversal
  • High Execution of arbitrary code
Taxonomy mappings

Mappings to ATT&CK, OWASP and other frameworks.

WASC | Null Byte Injection OWASP Attacks | Embedding Null Code
Related CWE

A Related Weakness relationship associates a weakness with this attack pattern. Each association implies a weakness that must exist for a given attack to be successful.

CWE-20: Improper Input Validation

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-158: Improper Neutralization of Null Byte or NUL Character

CWE-172: Encoding Error

CWE-173: Improper Handling of Alternate Encoding

CWE-697: Incorrect Comparison

CWE-707: Improper Neutralization

Visit http://capec.mitre.org/ for more details.