CWEweakness

CWE-48 Path Equivalence: 'file name' (Internal Whitespace)

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product accepts path input in the form of internal space ('file(SPACE)name') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

Common consequences

• Confidentiality, Integrity: Read Files or Directories, Modify Files or Directories

Observed examples

• CVE-2000-0293: Filenames with spaces allow arbitrary file deletion when the product does not properly quote them; some overlap with path traversal. • CVE-2001-1567: "+" characters in query string converted to spaces before sensitive file/extension (internal space), leading to bypass of access restrictions to the file.

Related

Observed example · CVE (2)

  • CVE-2001-1567 Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly… vulnerability
  • CVE-2000-0293 aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names… vulnerability

Child of · CWE (1)

  • CWE-41 Improper Resolution of Path Equivalence weakness