128
Reference Description
CVE-2002-0200 Server allows remote attackers to cause a denial of service via an HTTP
request for an MS-DOS device name.
https://www.cve.org/CVERecord?id=CVE-2002-0200
CVE-2002-1052 Product allows remote attackers to use MS-DOS device names in HTTP
requests to cause a denial of service or obtain the physical path of the server.
https://www.cve.org/CVERecord?id=CVE-2002-1052
CVE-2001-0493 Server allows remote attackers to cause a denial of service via a URL that
contains an MS-DOS device name.
https://www.cve.org/CVERecord?id=CVE-2001-0493
CVE-2001-0558 Server allows a remote attacker to create a denial of service via a URL request
which includes a MS-DOS device name.
https://www.cve.org/CVERecord?id=CVE-2001-0558
CVE-2000-0168 Microsoft Windows 9x operating systems allow an attacker to cause a denial of
service via a pathname that includes file device names, aka the "DOS Device
in Path Name" vulnerability.
https://www.cve.org/CVERecord?id=CVE-2000-0168
CVE-2001-0492 Server allows remote attackers to determine the physical path of the server via
a URL containing MS-DOS device names.
https://www.cve.org/CVERecord?id=CVE-2001-0492
CVE-2004-0552 Product does not properly handle files whose names contain reserved MSDOS
device names, which can allow malicious code to bypass detection when
it is installed, copied, or executed.
https://www.cve.org/CVERecord?id=CVE-2004-0552
CVE-2005-2195 Server allows remote attackers to cause a denial of service (application crash)
via a URL with a filename containing a .cgi extension and an MS-DOS device
name.
https://www.cve.org/CVERecord?id=CVE-2005-2195
Affected Resources
• File or Directory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 743 CERT C Secure Coding Standard (2008) Chapter 10 -
Input Output (FIO)
734 2347
MemberOf 857 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 14 - Input Output (FIO)
844 2368
MemberOf 877 CERT C++ Secure Coding Section 09 - Input Output
(FIO)
868 2377
MemberOf 981 SFP Secondary Cluster: Path Traversal 888 2409
MemberOf 1147 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 13. Input Output (FIO)
1133 2450
MemberOf 1163 SEI CERT C Coding Standard - Guidelines 09. Input
Output (FIO)
1154 2459
MemberOf 1404 Comprehensive Categorization: File Handling 1400 2529
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Windows MS-DOS device names
CWE Version 4.14
CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream
CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream