CAPEC Definitions

    CAPEC Definitions / CAPEC-551

    CAPEC-551: Modify Existing Service

    When an operating system starts, it also starts programs called services or daemons. Modifying existing services may break existing services or may enable services that are disabled/not commonly used.

    Severity:
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    Limit privileges of user accounts so service changes can only be performed by authorized administrators. Also monitor any service changes that may occur inadvertently.

    Relationships with other CAPECs

    CAPEC-542: Targeted Malware

    Prerequisites

    No prerequisites found.

    Related Weaknesses

    CWE-284: Improper Access Control

    CWE-522: Insufficiently Protected Credentials