CWEweakness

CWE-430 Deployment of Wrong Handler

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The wrong "handler" is assigned to process an object or request.

Common consequences

• Integrity, Other: Varies by Context, Unexpected State — An example of deploying the wrong handler would be calling a servlet to reveal source code of a .JSP file, or

Potential mitigations

• [Architecture and Design] Perform a type check before interpreting an object. • [Architecture and Design] Reject any inconsistent types, such as a file with a .GIF extension that appears to consist of PHP code.

Observed examples

• CVE-2001-0004: Source code disclosure via manipulated file extension that causes parsing by wrong DLL. • CVE-2002-0025: Web browser does not properly handle the Content-Type header field, causing a different application to process the document. • CVE-2000-1052: Source code disclosure by directly invoking a servlet. • CVE-2002-1742: Arbitrary Perl functions can be loaded by calling a non-existent function that activates a handler.

Related

Attack pattern · CAPEC (1)

  • CAPEC-11 Cause Web Server Misclassification attack pattern

Observed example · CVE (4)

  • CVE-2002-1742 SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using… vulnerability
  • CVE-2002-0025 Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify… vulnerability
  • CVE-2001-0004 IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested… vulnerability
  • CVE-2000-1052 Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. vulnerability

Can precede · CWE (1)

  • CWE-433 Unparsed Raw Web Content Delivery weakness

Child of · CWE (1)

  • CWE-691 Insufficient Control Flow Management weakness

Peer of · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-11 Cause Web Server Misclassification attack pattern

Referenced by CVE · weakness (2)

  • CVE-2026-42356 Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be… vulnerability
  • CVE-2025-3946 The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access… vulnerability

Referenced by CWE · peer of (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

Referenced by OWASP · mapped cwe (1)