144
Related Attack Patterns
CAPEC-ID Attack Pattern Name
81 Web Server Logs Tampering
93 Log Injection-Tampering-Forging
CWE-76: Improper Neutralization of Equivalent Special Elements
Weakness ID : 76
Structure : Simple
Abstraction : Base
Description
The product correctly neutralizes certain special elements, but it improperly neutralizes equivalent
special elements.
Extended Description
The product may have a fixed list of special characters it believes is complete. However, there may
be alternate encodings, or representations that also have the same meaning. For example, the
product may filter out a leading slash (/) to prevent absolute path names, but does not account for
a tilde (~) followed by a user name, which on some *nix systems could be expanded to an absolute
pathname. Alternately, the product might filter a dangerous "-e" command-line switch when calling
an external program, but it might not account for "--exec" or other switches that have the same
semantics.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 75 Failure to Sanitize Special Elements into a Different Plane
(Special Element Injection)