COMMON WEAKNESS ENUMERATIONIncomplete

CWE-1327

Binding to an Unrestricted IP Address

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

Extended description

When a server binds to the address 0.0.0.0, it allows connections from every IP address on the local machine, effectively exposing the server to every possible network. This might be much broader access than intended by the developer or administrator, who might only be expecting the server to be reachable from a single interface/network.

Root cause

How and when does the problem arise?

Lifecycle phase

System Configuration

Risk

What does successful exploitation lead to?

DoS: Amplification

Affected security scopes: Availability

Defence

How is it prevented and fixed?

System Configuration

Secure configuration approach

Detail
Assign IP addresses that are not 0.0.0.0.

Effectiveness: High

System Configuration

Firewall

Detail
Unwanted connections to the configured server may be denied through a firewall or other packet filtering measures.

Effectiveness: High