2215
CAPEC-ID Attack Pattern Name
68 Subvert Code-signing Facilities
679 Exploitation of Improperly Configured or Implemented Memory Protections
References
[REF-1152]Trusted Computing Group. "TCG Roots of Trust Specification".
2018 July. < https://trustedcomputinggroup.org/wp-content/uploads/
TCG_Roots_of_Trust_Specification_v0p20_PUBLIC_REVIEW.pdf >.
[REF-1153]GlobalPlatform Security Task Force. "Root of Trust Definitions and
Requirements". 2017 March. < https://globalplatform.org/wp-content/uploads/2018/06/
GP_RoT_Definitions_and_Requirements_v1.0.1_PublicRelease_CC.pdf >.
[REF-1348]"bootrom.sv". 2019. < https://github.com/HACK-EVENT/hackatdac19/
blob/619e9fb0ef32ee1e01ad76b8732a156572c65700/bootrom/bootrom.sv#L263C19-L263C19
>.2023-09-18.
[REF-1349]"bootrom.sv". 2019. < https://github.com/HACK-EVENT/hackatdac19/blob/
ba6abf58586b2bf4401e9f4d46e3f084c664ff88/bootrom/bootrom.sv#L259C9-L259C9
>.2023-09-18.
CWE-1327: Binding to an Unrestricted IP Address
Weakness ID : 1327
Structure : Simple
Abstraction : Base
Description
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any
computing resource that communicates remotely.
Extended Description
When a server binds to the address 0.0.0.0, it allows connections from every IP address on the
local machine, effectively exposing the server to every possible network. This might be much
broader access than intended by the developer or administrator, who might only be expecting the
server to be reachable from a single interface/network.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 417 Communication Channel Errors 2325
Applicable Platforms
Language : Other (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
CWE Version 4.14
CWE-1327: Binding to an Unrestricted IP Address
CWE-1327: Binding to an Unrestricted IP Address