CWEweakness

CWE-58 Path Equivalence: Windows 8.3 Filename

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product contains a protection mechanism that restricts access to a long filename on a Windows operating system, but it does not properly restrict access to the equivalent short "8.3" filename.

Common consequences

• Confidentiality, Integrity: Read Files or Directories, Modify Files or Directories

Potential mitigations

• [System Configuration] Disable Windows from supporting 8.3 filenames by editing the Windows registry. Preventing 8.3 filenames will not remove previously generated 8.3 filenames.

Observed examples

• CVE-1999-0012: Multiple web servers allow restriction bypass using 8.3 names instead of long names • CVE-2001-0795: Server allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters (CWE-178) or (2) 8.3 file names (CWE-58). • CVE-2005-0471: Multi-Factor Vulnerability. Product generates temporary filenames using long filenames, which become predictable in 8.3 format.

Related

Observed example · CVE (3)

  • CVE-2005-0471 Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style… vulnerability
  • CVE-2001-0795 Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1)… vulnerability
  • CVE-1999-0012 Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. vulnerability

Child of · CWE (1)

  • CWE-41 Improper Resolution of Path Equivalence weakness