Which of the following is true of improper error handling?
A)Attackers can use error messages to extract specific information from a system.
B)Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
C)Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
D)All of the above.

Question

Quizplus · Accepted Answer

All of the options provided are true regarding improper error handling. Attackers can exploit detailed error messages to gain insights into the underlying system, use unexpected errors to cause a denial-of-service attack, and potentially exploit buffer or stack overflow conditions from these errors to execute arbitrary code.

Which of the Following Is True of Improper Error Handling