CWE-436
Interpretation Conflict
2006-07-19
00h00 +00:00
00h00 +00:00
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
이름: Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.
일반 정보
취약점 도입 방식
Array : This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.적용 가능한 플랫폼
언어
클래스: Not Language-Specific (Undetermined)기술
클래스: Not Technology-Specific (Undetermined)일반적인 결과
| 범위 | 영향 | 가능성 |
|---|---|---|
| Integrity Other | Unexpected State, Varies by Context |
관찰된 예시
| 참고 자료 | 설명 |
|---|---|
CVE-2005-1215 | Bypass filters or poison web cache using requests with multiple Content-Length headers, a non-standard behavior. |
CVE-2002-0485 | Anti-virus product allows bypass via Content-Type and Content-Disposition headers that are mixed case, which are still processed by some clients. |
CVE-2002-1978 | FTP clients sending a command with "PASV" in the argument can cause firewalls to misinterpret the server's error as a valid response, allowing filter bypass. |
CVE-2002-1979 | FTP clients sending a command with "PASV" in the argument can cause firewalls to misinterpret the server's error as a valid response, allowing filter bypass. |
CVE-2002-0637 | Virus product bypass with spaces between MIME header fields and the ":" separator, a non-standard message that is accepted by some clients. |
CVE-2002-1777 | AV product detection bypass using inconsistency manipulation (file extension in MIME Content-Type vs. Content-Disposition field). |
CVE-2005-3310 | CMS system allows uploads of files with GIF/JPG extensions, but if they contain HTML, Internet Explorer renders them as HTML instead of images. |
CVE-2005-4260 | Interpretation conflict allows XSS via invalid "<" when a ">" is expected, which is treated as ">" by many web browsers. |
CVE-2005-4080 | Interpretation conflict (non-standard behavior) enables XSS because browser ignores invalid characters in the middle of tags. |
취약점 매핑 메모
근거 : This CWE entry is a Class and might have Base-level children that would be more appropriate댓글 : Examine children of this entry to see if there is a better fit
관련 공격 패턴
| CAPEC ID | 공격 패턴 이름 |
|---|---|
| CAPEC-105 | HTTP Request Splitting
|
| CAPEC-273 | HTTP Response Smuggling
|
| CAPEC-34 | HTTP Response Splitting
|
참고 자료
REF-427
On Interpretation Conflict VulnerabilitiesSteve Christey.
https://seclists.org/bugtraq/2005/Nov/30
REF-428
Insertion, Evasion, and Denial of Service: Eluding Network Intrusion DetectionThomas H. Ptacek, Timothy N. Newsham.
https://insecure.org/stf/secnet_ids/secnet_ids.pdf
REF-429
0x00 vs ASP file upload scriptsBrett Moore.
http://www.security-assessment.com/Whitepapers/0x00_vs_ASP_File_Uploads.pdf
REF-431
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encodingDavid F. Skoll.
https://marc.info/?l=bugtraq&m=109525864717484&w=2
REF-514
Perl CGI problemsRain Forest Puppy.
https://phrack.org/issues/55/7
제출
| 이름 | 조직 | 날짜 | 출시일 | Version |
|---|---|---|---|---|
| PLOVER | Draft 3 |
수정 사항
| 이름 | 조직 | 날짜 | 댓글 |
|---|---|---|---|
| Eric Dalci | Cigital | updated Time_of_Introduction | |
| CWE Content Team | MITRE | updated Relationships, Other_Notes, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Description, Observed_Examples, Other_Notes, References | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Demonstrative_Examples, Observed_Examples, References, Relationships | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Relationships, Type | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated References, Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships, Weakness_Ordinalities | |
| CWE Content Team | MITRE | updated Description, Modes_of_Introduction, Relationships, Time_of_Introduction |
