The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
This creates a race condition that allows an attacker to access the channel before the authorized user does.
Threat Mapped score: 0.0
Industry: Finiancial
Threat priority: Unclassified
CVE: CVE-1999-0351
FTP "Pizza Thief" vulnerability. Attacker can connect to a port that was intended for use by another client.
CVE: CVE-2003-0230
Product creates Windows named pipe during authentication that another attacker can hijack by connecting to it.
N/A
N/A
| Phase | Note |
|---|---|
| Architecture and Design | N/A |
N/A