Given the code snippet below:Which of the following vulnerability types in the MOST concerning?

Question 82 of 270 from exam CAS-003: CompTIA CASP+

Prev Question Next Question

Question

Given the code snippet below:

$include <stdio.h> include <stdlib-h> int main(void) { char username [8]; print£(“Enter your username: “); gets (username) printé("\n"; if (username == NULL) { printf ("you did not enter a username\n”); } it stromp(username, “admin”) { print£("$s”, “Admin user, enter your physical token value: “ie // vest of conditional logic here has been snipped for brevity } else [ print£("Standard user, enter your password: “); // rest of conditional logic here has been snipped for brevity }$

Which of the following vulnerability types in the MOST concerning?

Answers

A. Only short usernames are supported, which could result in brute forcing of credentials.

B. Buffer overflow in the username parameter could lead to a memory corruption vulnerability.

C. Hardcoded usernames with different code paths taken depend on which user is entered.

D. Format string vulnerability is present for admin users but not for standard users.

Show Answer

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Prev Question Next Question