CWEweakness

CWE-46 Path Equivalence: 'filename ' (Trailing Space)

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product accepts path input in the form of trailing space ('filedir ') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

Common consequences

• Confidentiality, Integrity: Read Files or Directories, Modify Files or Directories

Observed examples

• CVE-2001-0693: Source disclosure via trailing encoded space "%20" • CVE-2001-0778: Source disclosure via trailing encoded space "%20" • CVE-2001-1248: Source disclosure via trailing encoded space "%20" • CVE-2004-0280: Source disclosure via trailing encoded space "%20" • CVE-2004-2213: Source code disclosure using trailing dot (CWE-42) or trailing encoded space "%20" (CWE-46) • CVE-2005-0622: Source disclosure via trailing encoded space "%20" • CVE-2005-1656: Source disclosure via trailing encoded space "%20" • CVE-2002-1603: Source disclosure via trailing encoded space "%20" • CVE-2001-0054: Multi-Factor Vulnerability (MFV). directory traversal and other issues in FTP server using Web encodings such as "%20"; certain manipulations have unusual side effects. • CVE-2002-1451: Trailing space ("+" in query string) leads to source code disclosure.

Related

Attack pattern · CAPEC (1)

  • CAPEC-649 Adding a Space to a File Extension attack pattern

Observed example · CVE (10)

  • CVE-2005-1656 Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space… vulnerability
  • CVE-2005-0622 RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request… vulnerability
  • CVE-2004-2213 Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2)… vulnerability
  • CVE-2004-0280 Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded… vulnerability
  • CVE-2002-1451 Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that… vulnerability
  • CVE-2002-1603 GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f… vulnerability
  • CVE-2001-0778 OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20). vulnerability
  • CVE-2001-0693 WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20). vulnerability
  • CVE-2001-1248 vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space… vulnerability
  • CVE-2001-0054 Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by… vulnerability

Can precede · CWE (1)

  • CWE-289 Authentication Bypass by Alternate Name weakness

Child of · CWE (2)

  • CWE-162 Improper Neutralization of Trailing Special Elements weakness
  • CWE-41 Improper Resolution of Path Equivalence weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-649 Adding a Space to a File Extension attack pattern

Referenced by CVE · weakness (1)

  • CVE-2026-8801 Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). vulnerability