CWE-605

Multiple Binds to the Same Port

Medium

Description

When multiple sockets are allowed to bind to the same port, other services on that port may be stolen or spoofed.

Potential Impact

Confidentiality: Read Application Data

How to Fix

Policy

Restrict server socket address to known local addresses.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-605 vulnerabilities in your codebase.

Get Security Assessment