Path Equivalence: 'filename.' (Trailing Dot)

Opis

The product accepts path input in the form of trailing dot ('filedir.') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

Skutki

• Access Control

  Bypass Protection Mechanism

Przykłady podatności

• CVE-2000-1114 Source code disclosure using trailing dot
• CVE-2002-1986 Source code disclosure using trailing dot
• CVE-2004-2213 Source code disclosure using trailing dot
• CVE-2005-3293 Source code disclosure using trailing dot
• CVE-2004-0061 Bypass directory access restrictions using trailing dot in URL
• CVE-2000-1133 Bypass directory access restrictions using trailing dot in URL
• CVE-2001-1386 Bypass check for ".lnk" extension using ".lnk."

Słabość nadrzędna

• CWE-41 Improper Resolution of Path Equivalence
• CWE-162 Improper Neutralization of Trailing Special Elements

Słabości podrzędne

• CWE-43 Path Equivalence: 'filename....' (Multiple Trailing Dot)

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific