1356
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 947 SFP Secondary Cluster: Authentication Bypass 888 2394
MemberOf 1368 ICS Dependencies (& Architecture): External Digital
Systems
1358 2505
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
References
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-1283]Forescout Vedere Labs. "OT:ICEFALL: The legacy of "insecure by design" and its
implications for certifications and risk management". 2022 June 0. < https://www.forescout.com/
resources/ot-icefall-report/ >.
CWE-605: Multiple Binds to the Same Port
Weakness ID : 605
Structure : Simple
Abstraction : Variant
Description
When multiple sockets are allowed to bind to the same port, other services on that port may be
stolen or spoofed.
Extended Description
On most systems, a combination of setting the SO_REUSEADDR socket option, and a
call to bind() allows any process to bind to a port to which a previous process has bound
with INADDR_ANY. This allows a user to bind to the specific address of a server bound to
INADDR_ANY on an unprivileged port, and steal its UDP packets/TCP connection.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 666 Operation on Resource in Wrong Phase of Lifetime 1462
ChildOf 675 Multiple Operations on Resource in Single-Operation
Context