Tag: security

Questions Related to security

Multiple choice technology security

What value is stored in *leaf in the program given below? int *myfunc(int tree) { int *node; int i=rand(); if(0==tree/pow(2,i)) node=&tree; else node=&i; return node; } int main(int argc, char * argv[]) { int *leaf; leaf=myfunc(7); }

value of tree
value of node
value of i
garbage-- its a dangling pointer

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

The following code is part of a system daemon that is run with elevated privileges. It opens a temp file in /tmp directory as a cache. Is there an issue in this code sample? Please assume that filling up /tmp is not an issue here. int outfile = fopen(“/tmp/cache_data”, O_WRONLY | O_CREAT | O_TRUNC, 0600);

Since the file name is hard coded, fopen() will fail if the file already exists
0600 is not a secure option. The parameter 0600 should be changed to 0666
Attackers can exploit by creating a symboling link /tmp/cache_data that points to a system file
Attackers can exploit the application's cache by writing directly to /tmp/cache_data

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Is writing to an already freed memory a vulnerability? x = malloc(200); /* do something with x / free (x); / do something else */ strcpy(x, “somedata”);

Overwriting freed memory is a security vulnerability
Depends on the application and how important “somedata” is
This will result in a buffer overflow since the freed memory location cannot handle 8 characters of data “somedata”
strcpy() will fail as it cannot write to already freed memory, and the application will crash

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What attacks can get realized due to below code? ... Connection con = null; Statement stmt = null; try{ String personName = req.getParameter("PName"); String personAddress = req.getParameter("PAddress"); String personEmail = req.getParameter("PEmail"); String personPhone = req.getParameter("PPhone"); con= UtilDAO.make_con(); stmt = con.createStatement(); String sql = "INSERT INTO PersonDetails values ('"+personName+"', '"+personAddress+"', '"+personEmail+"', '"+personPhone+"')"; stmt.executeUpdate(sql); con.commit(); stmt.close(); UtilDAO.close(con); } catch(Exception e) { log.debug(“Exception is:”+e); } ...

Cross Site Scripting
SQL Injection
Improper Resource Release
Option 1 AND Option 2
Option 1 AND Option 2 AND Option 3
Option 2 AND Option 3

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Identify the line on which the vulnerability exists: 1 public class performSearchAction extends HttpServlet{ 2 // Servlet for Search Action 3 public void doPost(HttpServletRequest req, HttpServletResponse res) 4 { 5 try 6 { 7 ArrayList arrSearch = Util.performSearchAction(req, res); 8 req.setAttribute(“SearchResults”,arrSearch); 9 RequestDispatcher rd = getServletContext().getRequestDispatcher("/SearchResult.jsp"); 10 rd.forward(req,res); 11 } catch (Exception e) { 12 log.debug(“Exception occurred:”+e); 13 } 14 } //End of doPost method 15 public void doGet(HttpServletRequest req, HttpServletResponse res) 16 { 17 doPost(req,res); 18 } //End of doGet method 19 } //End of Class

Line # 12
Line # 9
Line # 17
Line # 8
Line # 14, 18 & 19

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Give the name of the vulnerability resides in the below code: 1 <% 2 if(null==resultArr) 3 { 4 %> 5 6 Your Search for '<%=request.getParameter("searchID")%>' has not returned any records 7 8 <% 9 } 10 %>

Information Leakage
Cross Site Scripting
Cross Site Tracing
Option 1 AND Option 2
Option 1 AND Option 3
Command Injection

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

What is wrong in the below code? public void doPost(HttpServletRequest req, HttpServletResponse res) { try { String language = req.getParameter("language"); res.sendRedirect("/doc/"+language+”/index.html”); } catch (Exception e) { } }

Request Redirection is vulnerable and not a good practice
Exception is not logged
Input parameter “language” is not validated
Option 1 AND Option 2
Option 1 AND Option 3
Option 2 AND Option 3

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In the following code, which is the location of vulnerability? 1 String username = req.getParameter("loginID"); 2 String password = req.getParameter("loginPassword"); 3 String sql = "SELECT UserID from Employee WHERE Emp_ID = ? AND Password=?"; 4 pstmt = con.prepareStatement(sql); 5 pstmt.setString(1,username); 6 pstmt.setString(2,password); 7 pstmt.execute(); 8 user = pstmt.getResultSet(); 9 if(user!=null) 10 { 11 while (user.next()) 12 { 13 userInfo.add(user.getString(1)); 14 } 15 } 16 else 17 { 18 log.debug(“Invalid Login: Login ID-”+ username+” Password-”+ password); 19 }

Line 5
Line 4
Line 11
Line 18

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

In the following code, which is the location of vulnerability? 1 bIsAdmin = true; 2 try 3 { 4 function (); 5 bIsAdmin = isAdminUser(userName); 6 } 7 catch (Exception ex) 8 { 9 log.write(ex.toString()); 10 }

Line 1
Line 5
Line 7
Line 9

Reveal answer Fill a bubble to check yourself

Multiple choice technology security

Is SQL injection possible in the below code? String username = request.getParameter(“username”); String password = request.getParameter(“password”); conn = pool.getConnection( ); PreparedStatement pstmt = conn.prepareStatement(“select * from user where username=”+username+” and password=”+password); pstmt.execute(); rs = pstmt.getResultSet();

True
False

Reveal answer Fill a bubble to check yourself

← Previous
1
2
3
4
5
6
7
8
9
10
11
…
133
134
Next →