Improper Handling of Windows ::DATA Alternate Data Stream
CWE-69
Short description
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
Extended description
An attacker can use an ADS to hide information about a file (e.g. size, the name of the process) from a system or file browser tools such as Windows Explorer and 'dir' at the command line utility. Alternately, the attacker might be able to bypass intended access restrictions for the associated data fork.
Best practices to prevent this CWE
Phase: Testing
Software tools are capable of finding ADSs on your system.
Phase: Implementation
Ensure that the source code correctly parses the filename to read or write to the correct stream.