578
Reference Description
CVE-2002-1531 Crash in HTTP request without a Content-Length field.
https://www.cve.org/CVERecord?id=CVE-2002-1531
CVE-2002-1077 Crash in HTTP request without a Content-Length field.
https://www.cve.org/CVERecord?id=CVE-2002-1077
CVE-2002-1358 Empty elements/strings in protocol test suite affect many SSH2 servers/clients.
https://www.cve.org/CVERecord?id=CVE-2002-1358
CVE-2003-0477 FTP server crashes in PORT command without an argument.
https://www.cve.org/CVERecord?id=CVE-2003-0477
CVE-2002-0107 Resultant infoleak in web server via GET requests without HTTP/1.0 version
string.
https://www.cve.org/CVERecord?id=CVE-2002-0107
CVE-2002-0596 GET request with empty parameter leads to error message infoleak (path
disclosure).
https://www.cve.org/CVERecord?id=CVE-2002-0596
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Maintenance
This entry will be deprecated in a future version of CWE. The term "missing parameter" was
used in both PLOVER and CLASP, with completely different meanings. However, data from both
taxonomies was merged into this entry. In PLOVER, it was meant to cover malformed inputs
that do not contain required parameters, such as a missing parameter in a CGI request. This
entry's observed examples and classification came from PLOVER. However, the description,
demonstrative example, and other information are derived from CLASP. They are related to an
incorrect number of function arguments, which is already covered by CWE-685.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Missing Parameter Error
CLASP Missing parameter
CWE-235: Improper Handling of Extra Parameters
Weakness ID : 235
Structure : Simple
Abstraction : Variant
Description
The product does not handle or incorrectly handles when the number of parameters, fields, or
arguments with the same name exceeds the expected amount.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
CWE Version 4.14
CWE-236: Improper Handling of Undefined Parameters
CWE-236: Improper Handling of Undefined Parameters