132
A web server that interprets FILE.cgi as processing instructions could disclose the source code
for FILE.cgi by requesting FILE.cgi/..namedfork/data. This might occur because the web server
invokes the default handler which may return the contents of the file.
Observed Examples
Reference Description
CVE-2004-1084 Server allows remote attackers to read files and resource fork content via
HTTP requests to certain special file names related to multiple data streams in
HFS+.
https://www.cve.org/CVERecord?id=CVE-2004-1084
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 981 SFP Secondary Cluster: Path Traversal 888 2409
MemberOf 1404 Comprehensive Categorization: File Handling 1400 2529
Notes
Theoretical
This and similar problems exist because the same resource can have multiple identifiers that
dictate which behavior can be performed on the resource.
Research Gap
Under-studied
References
[REF-578]NetSec. "NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple
OSX HFS+". BugTraq. 2005 February 6. < https://seclists.org/bugtraq/2005/Feb/309 >.2023-04-07.
CWE-73: External Control of File Name or Path
Weakness ID : 73
Structure : Simple
Abstraction : Base
Description
The product allows user input to control or influence paths or file names that are used in filesystem
operations.
Extended Description
This could allow an attacker to access or modify system files or other files that are critical to the
application.
Path manipulation errors occur when the following two conditions are met:
1. An attacker can specify a path used in an operation on the filesystem.
2. By specifying the resource, the attacker gains a capability that would not otherwise be
permitted.
For example, the program may give the attacker the ability to overwrite the specified file or run with
a configuration controlled by the attacker.
CWE Version 4.14
CWE-73: External Control of File Name or Path
CWE-73: External Control of File Name or Path