Improper Handling of Extra Parameters

Opis

The product does not handle or incorrectly handles when the number of parameters, fields, or arguments with the same name exceeds the expected amount.

Skutki

• Integrity

  Unexpected State

Przykłady podatności

• CVE-2003-1014 MIE. multiple gateway/security products allow restriction bypass using multiple MIME fields with the same name, which are interpreted differently by clients.

Słabość nadrzędna

• CWE-233 Improper Handling of Parameters

Kiedy powstaje

• Implementation — This typically occurs in situations when only one element is expected to be specified.

Dotyczy

Not Language-Specific

Uwagi

This type of problem has a big role in multiple interpretation vulnerabilities and various HTTP attacks.