888
ChildOf 420 Unprotected Alternate Channel 1018
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 557 Concurrency Issues 2329
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control Gain Privileges or Assume Identity
Bypass Protection Mechanism
Observed Examples
Reference Description
CVE-1999-0351 FTP "Pizza Thief" vulnerability. Attacker can connect to a port that was
intended for use by another client.
https://www.cve.org/CVERecord?id=CVE-1999-0351
CVE-2003-0230 Product creates Windows named pipe during authentication that another
attacker can hijack by connecting to it.
https://www.cve.org/CVERecord?id=CVE-2003-0230
Affected Resources
• System Process
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 956 SFP Secondary Cluster: Channel Attack 888 2397
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Alternate Channel Race Condition
CWE Version 4.14
CWE-422: Unprotected Windows Messaging Channel ('Shatter')
CWE-422: Unprotected Windows Messaging Channel ('Shatter')