1056
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
MemberOf 1000 Research Concepts 2575
ParentOf 188 Reliance on Data/Memory Layout 470
ParentOf 436 Interpretation Conflict 1057
ParentOf 439 Behavioral Change in New Version or Environment 1061
ParentOf 1038 Insecure Automated Optimizations 1872
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Alternate Terms
Interaction Error :
Emergent Fault :
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
Varies by Context
Demonstrative Examples
Example 1:
The paper "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion
Detection" [REF-428] shows that OSes varied widely in how they manage unusual packets, which
made it difficult or impossible for intrusion detection systems to properly detect certain attacker
manipulations that took advantage of these OS differences.
Observed Examples
Reference Description
CVE-2002-0485 Anti-virus product allows bypass via Content-Type and Content-Disposition
headers that are mixed case, which are still processed by some clients.
https://www.cve.org/CVERecord?id=CVE-2002-0485
CVE-2003-0411 chain: Code was ported from a case-sensitive Unix platform to a caseinsensitive
Windows platform where filetype handlers treat .jsp and .JSP as
different extensions. JSP source code may be read because .JSP defaults to
the filetype "text".
https://www.cve.org/CVERecord?id=CVE-2003-0411
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 957 SFP Secondary Cluster: Protocol Error 888 2398
MemberOf 1398 Comprehensive Categorization: Component Interaction 1400 2524
Notes
Research Gap
CWE Version 4.14
CWE-436: Interpretation Conflict
CWE-436: Interpretation Conflict