CWE-605 (对同一端口的多重绑定) — Vulnerability Class 3

CWE-605 represents a network-level weakness where multiple sockets bind to the same port, enabling service hijacking or spoofing. This vulnerability typically arises when developers improperly configure the SO_REUSEADDR socket option, allowing a malicious process to bind to a specific address that a legitimate server previously bound to INADDR_ANY. Attackers exploit this by launching a secondary service on the targeted port, effectively stealing traffic or injecting malicious responses before the intended application can process them. To mitigate this risk, developers must strictly manage socket options, ensuring SO_REUSEADDR is used only when necessary and paired with appropriate access controls. Furthermore, implementing strict firewall rules and validating source addresses can prevent unauthorized processes from intercepting network connections, thereby preserving service integrity and preventing unauthorized access to sensitive data streams.