CWE-243Variant

Creation of chroot Jail Without Changing Working Directory

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product uses the chroot() system call to create a jail, but does not change the working directory afterward. This does not prevent access to files outside of the jail.

The record
Technical detail
CWE ID
CWE-243
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf