1489
This code may result in two servers binding a socket to same port, thus receiving each other's
traffic. This could be used by an attacker to steal packets meant for another process, such as a
secure FTP server.
Observed Examples
Reference Description
CVE-2009-0935 Attacker provides invalid address to a memory-reading function, causing a
mutex to be unlocked twice
https://www.cve.org/CVERecord?id=CVE-2009-0935
CVE-2019-13351 file descriptor double close can cause the wrong file to be associated with a file
descriptor.
https://www.cve.org/CVERecord?id=CVE-2019-13351
CVE-2004-1939 XSS protection mechanism attempts to remove "/" that could be used to close
tags, but it can be bypassed using double encoded slashes (%252F)
https://www.cve.org/CVERecord?id=CVE-2004-1939
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 743 CERT C Secure Coding Standard (2008) Chapter 10 -
Input Output (FIO)
734 2347
MemberOf 877 CERT C++ Secure Coding Section 09 - Input Output
(FIO)
868 2377
MemberOf 984 SFP Secondary Cluster: Life Cycle 888 2411
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Notes
Relationship
This weakness is probably closely associated with other issues related to doubling, such as
CWE-462 (duplicate key in alist) or CWE-102 (Struts duplicate validation forms). It's usually a
case of an API contract violation (CWE-227).
CWE-676: Use of Potentially Dangerous Function
Weakness ID : 676
Structure : Simple
Abstraction : Base
Description
The product invokes a potentially dangerous function that could introduce a vulnerability if it is used
incorrectly, but the function can also be used safely.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1177 Use of Prohibited Code 1972
CWE Version 4.14
CWE-676: Use of Potentially Dangerous Function
CWE-676: Use of Potentially Dangerous Function