Duplicate custom url's are possible when cloning a product. I'm not sure I'd call it a true bug because ideally the admin should catch it and change it, but right now there is nothing preventing it which results in many products pointing to the same original page.