You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Chuck Rolke (Created) (JIRA)" <ji...@apache.org> on 2012/01/19 20:02:41 UTC
[jira] [Created] (QPID-3772) Qpid broker on Windows allows
multiple, simultaneous processes to listen to broker port
Qpid broker on Windows allows multiple, simultaneous processes to listen to broker port
---------------------------------------------------------------------------------------
Key: QPID-3772
URL: https://issues.apache.org/jira/browse/QPID-3772
Project: Qpid
Issue Type: Bug
Components: C++ Broker
Affects Versions: 0.14
Environment: Windows broker
Reporter: Chuck Rolke
Socket code on windows allows multiple, simultaneous listening processes on broker port.
C:\Windows\system32>netstat -anb
TCP 0.0.0.0:5672 0.0.0.0:0 LISTENING
[qpidd2.exe]
TCP 0.0.0.0:5672 0.0.0.0:0 LISTENING
[qpidd.exe]
This is a security issue as it allows a rogue process to hijack connections directed to the broker.
A simple first step is in Socket.cpp to change SO_REUSEADDR to SO_EXCLUSIVEADDRUSE as described in
http://msdn.microsoft.com/en-us/library/windows/desktop/cc150667%28v=vs.85%29.aspx
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org