界: API Abuse

API 就像是呼叫者與被呼叫者之間簽訂的規定。最常見的 API 濫用形式是由呼叫者這一當事方未能遵守此規定所造成的。例如，如果程式在呼叫 chroot() 後無法呼叫 chdir()，即違反規範如何以安全方式變更使用中根目錄的規定。程式庫濫用的另一個好例子是期待被呼叫者向呼叫者傳回值得信賴的 DNS 資訊。在這種情況下，呼叫者是透過對其行為做出某些假設 (傳回值可用於驗證目的) 來濫用被呼叫者 API。另一方也可能違反呼叫者與被呼叫者間的規定。例如，如果編碼器衍生出子類別 SecureRandom 並傳回一個非隨機值，則違反了規定。

Dangerous Function: xp_cmdshell

PLSQL/TSQL

Abstract

無法安全地使用 xp_cmdshell 函數。不應使用該函數。

Explanation

某些函數無論使用方法為何，都有危險性。xp_cmdshell 函數會啟動 Windows 指令 shell，以執行提供的指令字串。該指令會在預設系統或提供的代理伺服器環境中執行。但是，沒有方法可以將使用者限制為預先指定的權限操作組合，任何權限授予都會開放使用者執行任何指令字串。

References

[1] xp_cmdshell

[2] Standards Mapping - Common Weakness Enumeration CWE ID 242

[3] Standards Mapping - General Data Protection Regulation (GDPR) Indirect Access to Sensitive Data

[4] Standards Mapping - OWASP Mobile 2014 M7 Client Side Injection

[5] Standards Mapping - Payment Card Industry Data Security Standard Version 3.0 Requirement 7.1.2

[6] Standards Mapping - Payment Card Industry Data Security Standard Version 3.1 Requirement 7.1.2

[7] Standards Mapping - Payment Card Industry Data Security Standard Version 3.2 Requirement 7.1.2

[8] Standards Mapping - Payment Card Industry Data Security Standard Version 3.2.1 Requirement 7.1.2

[9] Standards Mapping - Payment Card Industry Data Security Standard Version 4.0 Requirement 7.2.2

[10] Standards Mapping - Payment Card Industry Data Security Standard Version 4.0.1 Requirement 7.2.2

[11] Standards Mapping - Payment Card Industry Software Security Framework 1.0 Control Objective 5.4 - Authentication and Access Control

[12] Standards Mapping - Payment Card Industry Software Security Framework 1.1 Control Objective 5.4 - Authentication and Access Control

[13] Standards Mapping - Payment Card Industry Software Security Framework 1.2 Control Objective 5.4 - Authentication and Access Control

[14] Standards Mapping - SANS Top 25 2011 Risky Resource Management - CWE ID 676

[15] Standards Mapping - Web Application Security Consortium Version 2.00 OS Commanding (WASC-31)

[16] Standards Mapping - Web Application Security Consortium 24 + 2 OS Commanding

desc.semantic.sql.dangerous_function_xp_cmdshell