Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Attack Patterns CAPEC-9 — Buffer Overflow in Local Command-Line Utilities
CAPEC-9

Buffer Overflow in Local Command-Line Utilities

TLP:CLEAR

Description

Typical severity: High. Likelihood of attack: High. This attack targets command-line utilities available in a number of shells. An adversary can leverage a vulnerability found in a command-line utility to escalate privilege to root.

Mitigation

Carefully review the service's implementation before making it available to user. For instance you can use manual or automated code review to uncover vulnerabilities such as buffer overflow. | Use a language or compiler that performs automatic bounds checking. | Use an abstraction library to abstract away risky APIs. Not a complete solution. | Compiler-based canary mechanisms such as StackGuard, ProPolice and the Microsoft Visual Studio /GS flag. Unless this provides automatic bounds checking, it is not a complete solution. | Operational: Use OS-level preventative functionality. Not a complete solution.

Details

Platforms
Software
Added
Jul 14, 2026
Leaving Threaticon

This link opens an external site that isn't part of the platform.