Software Vulnerabilities

Question 1

Name some Software vulnerabilities

Answer 1

• input validation and representation
• API abuse
• security features
• error handling
• code quality
• environment

Question 2

what is OWASP Open Web Application Security Project?

Answer 2

List of most frequently occurring types of vulnerabilities in web applications

Question 3

what are the most common vulnerabilities regarding to OWASP

Answer 3

1. Injection(SQL, OS, LDAP)
2. Broken authentication
3. Sensitive Data Exposure
4. XML External Entities
5. Broken Access Control
   6, Security Misconfiguration
6. Cross-Side-Scripting
7. Insecure Deserialization
8. Components with Known Vulnerabilities
9. Insufficient Loggining

Question 4

What is TOCTTOU?

Answer 4

Time of check to time of use
-Change of resource, reference, or subject between privilege check and resource access
Exploitation requires exact timing

Question 5

what can a race condition cause?

Answer 5

• nondeterministic computation
• Unexpected sequence of events
• Violating properties of a transaction