Behavioral Change in New Version or Environment
Draft Base
Structure: Simple
Description
A's behavior or functionality changes with a new version of A, or a new environment, which is not known (or manageable) by B.
Common Consequences 1
Scope: Other
Impact: Quality DegradationVaries by Context
Observed Examples 3
CVE-2002-1976Linux kernel 2.2 and above allow promiscuous mode using a different method than previous versions, and ifconfig is not aware of the new method (alternate path property).
CVE-2005-1711Product uses defunct method from another product that does not return an error code and allows detection avoidance.
CVE-2003-0411chain: Code was ported from a case-sensitive Unix platform to a case-insensitive Windows platform where filetype handlers treat .jsp and .JSP as different extensions. JSP source code may be read because .JSP defaults to the filetype "text".
Applicable Platforms
Languages:
Not Language-Specific : Undetermined
Modes of Introduction
Architecture and Design
Implementation
Alternate Terms
Functional change
Related Weaknesses
Taxonomy Mapping
- PLOVER