Design/Logic Flaw

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain sensitive user information via a mixed case @import in a style element in an SVG file, as demonstrated by "@imporT."...

Hiawatha < 8.8 Mixed Case DenyBody Security Bypass

According to its server response header, the installed version of Hiawatha is a version prior to 8.8. A flaw exists when handling mixed case input that could allow an attacker to bypass the DenyBody rules. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69034;...

Code injection

jetty 6.0.x jetty6 beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations...

CVE-2004-2214

The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...

CVE-2004-2214

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

security flaw

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

PT-2004-3109 · Embedthis · Mbedthis Appweb Http Server

Name of the Vulnerable Software and Affected Versions: Mbedthis AppWeb HTTP server versions prior to 1.1.3 Description: The issue allows remote attackers to bypass access restrictions via a URI with mixed case characters. Recommendations: For versions prior to 1.1.3, update to version 1.1.3 or...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

CVE-2002-0485

Affected software: Norton Anti-Virus (NAV). Vulnerability: attachments whose Content-Type and Content-Disposition headers are mixed upper/lower case can bypass content filtering, an issue observed by some mail clients. Root cause: header case sensitivity leads to filtering bypass. Impact: allows ...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

PT-2002-1536 · Symantec · Norton Anti-Virus

Name of the Vulnerable Software and Affected Versions: Norton Anti-Virus NAV affected versions not specified Description: The issue allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignor...