CWE-436
Interpretation Conflict
2006-07-19
00h00 +00:00
00h00 +00:00
Thông báo cho một CWE
Luôn được thông báo về mọi thay đổi đối với một CWE cụ thể.
Tên: Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.
Thông tin chung
Các cách xuất hiện
Array : This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.Nền tảng áp dụng
Ngôn ngữ
Lớp: Not Language-Specific (Undetermined)Công nghệ
Lớp: Not Technology-Specific (Undetermined)Hậu quả phổ biến
| Phạm vi | Tác động | Khả năng xảy ra |
|---|---|---|
| Integrity Other | Unexpected State, Varies by Context |
Ví dụ đã quan sát
| Tài liệu tham khảo | Mô tả |
|---|---|
CVE-2005-1215 | Bypass filters or poison web cache using requests with multiple Content-Length headers, a non-standard behavior. |
CVE-2002-0485 | Anti-virus product allows bypass via Content-Type and Content-Disposition headers that are mixed case, which are still processed by some clients. |
CVE-2002-1978 | FTP clients sending a command with "PASV" in the argument can cause firewalls to misinterpret the server's error as a valid response, allowing filter bypass. |
CVE-2002-1979 | FTP clients sending a command with "PASV" in the argument can cause firewalls to misinterpret the server's error as a valid response, allowing filter bypass. |
CVE-2002-0637 | Virus product bypass with spaces between MIME header fields and the ":" separator, a non-standard message that is accepted by some clients. |
CVE-2002-1777 | AV product detection bypass using inconsistency manipulation (file extension in MIME Content-Type vs. Content-Disposition field). |
CVE-2005-3310 | CMS system allows uploads of files with GIF/JPG extensions, but if they contain HTML, Internet Explorer renders them as HTML instead of images. |
CVE-2005-4260 | Interpretation conflict allows XSS via invalid "<" when a ">" is expected, which is treated as ">" by many web browsers. |
CVE-2005-4080 | Interpretation conflict (non-standard behavior) enables XSS because browser ignores invalid characters in the middle of tags. |
Ghi chú ánh xạ lỗ hổng
Lý do : This CWE entry is a Class and might have Base-level children that would be more appropriateBình luận : Examine children of this entry to see if there is a better fit
Mẫu tấn công liên quan
| ID CAPEC | Tên mẫu tấn công |
|---|---|
| CAPEC-105 | HTTP Request Splitting
|
| CAPEC-273 | HTTP Response Smuggling
|
| CAPEC-34 | HTTP Response Splitting
|
Tài liệu tham khảo
REF-427
On Interpretation Conflict VulnerabilitiesSteve Christey.
https://seclists.org/bugtraq/2005/Nov/30
REF-428
Insertion, Evasion, and Denial of Service: Eluding Network Intrusion DetectionThomas H. Ptacek, Timothy N. Newsham.
https://insecure.org/stf/secnet_ids/secnet_ids.pdf
REF-429
0x00 vs ASP file upload scriptsBrett Moore.
http://www.security-assessment.com/Whitepapers/0x00_vs_ASP_File_Uploads.pdf
REF-431
Re: Corsaire Security Advisory - Multiple vendor MIME RFC2047 encodingDavid F. Skoll.
https://marc.info/?l=bugtraq&m=109525864717484&w=2
REF-514
Perl CGI problemsRain Forest Puppy.
https://phrack.org/issues/55/7
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành | Version |
|---|---|---|---|---|
| PLOVER | Draft 3 |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| Eric Dalci | Cigital | updated Time_of_Introduction | |
| CWE Content Team | MITRE | updated Relationships, Other_Notes, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships, Taxonomy_Mappings | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Description, Observed_Examples, Other_Notes, References | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Demonstrative_Examples, Observed_Examples, References, Relationships | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Relationships, Type | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Related_Attack_Patterns | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated References, Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships, Weakness_Ordinalities | |
| CWE Content Team | MITRE | updated Description, Modes_of_Introduction, Relationships, Time_of_Introduction |
