CWE-178: Improper Handling of Case Sensitivity
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- novell edirectoryNovell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote...9.8 Critical
- ultimate php board project php boardregister.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a...9.8 Critical
- symantec norton antivirusNorton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose...7.5 High
- cmfperception liteservePerception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs...7.5 High
- apache http serverApache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass...9.8 Critical
- microsoft windows 2000Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters...7.8 High
- bea weblogic serverThe default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view...7.5 High
- unify ewave servletexecUnify eWave ServletExec allows a remote attacker to view source code of a JSP program by...7.5 High
- ibm websphere application serverIBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by...7.5 High
- netscape fasttrack serverNetscape FastTrack Web server lists files when a lowercase "get" command is used instead of an...7.5 High