This code may result in two servers binding a socket to same port,
thus receiving each other's traffic. This could be used by an attacker
to steal packets meant for another process, such as a secure FTP
server.
Potential Mitigations
Restrict server socket address to known local addresses.
Other Notes
On most systems, a combination of setting the SO_REUSEADDR socket option,
and a call to bind() allows any process to bind to a port to which a
previous process has bound width INADDR_ANY. This allows a user to bind to
the specific address of a server bound to INADDR_ANY on an unprivileged
port, and steal its udp packets/tcp connection.
Description
