Improper Handling of Case Sensitivity

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

CVEs (133)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-2154 2Apple Canonical 2Cups Ubuntu Linux Apr 16, 2026 Dec 31, 2004 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what...Show more CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.Show less
CVE-2004-1083 1Apple 4Darwin Streaming Server Mac Os XMac Os X Server+1 more Apr 16, 2026 Dec 3, 2004 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store...Show more Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.Show less
CVE-2003-0411 1Oracle 1Sun One Application Server Apr 16, 2026 Jun 30, 2003 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
CVE-2002-2119 1Novell 1Edirectory Apr 16, 2026 Dec 31, 2002 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.
CVE-2002-1820 1Ultimate Php Board Project 1Ultimate Php Board Apr 16, 2026 Dec 31, 2002 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a...Show more register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."Show less
CVE-2002-0485 1Symantec 1Norton Antivirus Apr 16, 2026 Aug 12, 2002 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.
CVE-2001-0795 1Cmfperception 1Liteserve Apr 16, 2026 Oct 18, 2001 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.
CVE-2001-0766 1Apache 1Http Server Apr 16, 2026 Oct 18, 2001 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
CVE-2001-1238 1Microsoft 1Windows 2000 Apr 16, 2026 Jul 16, 2001 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users t...Show more Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.Show less
CVE-2000-0499 1Bea 1Weblogic Server Apr 16, 2026 Jun 8, 2000 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-2000-0498 1Unify 1Ewave Servletexec Apr 16, 2026 Jun 8, 2000 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-2000-0497 1Ibm 1Websphere Application Server Apr 16, 2026 Jun 8, 2000 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-1999-0239 1Netscape 1Fasttrack Server Apr 16, 2026 Jan 1, 1998 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.

Previous 1 2 3 4 5 67