activemq-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jeff Peterson (JIRA)" <j...@apache.org>
Subject [jira] Commented: (AMQ-2094) Can't bind the connector to localhost or actuall IP correctly.
Date Sun, 01 Mar 2009 04:16:00 GMT

    [ https://issues.apache.org/activemq/browse/AMQ-2094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=50116#action_50116
] 

Jeff Peterson commented on AMQ-2094:
------------------------------------

Im noticing this behavior as well.  This is an important security problem for us. Please resolve
ASAP.

> Can't bind the connector to localhost or actuall IP correctly.
> --------------------------------------------------------------
>
>                 Key: AMQ-2094
>                 URL: https://issues.apache.org/activemq/browse/AMQ-2094
>             Project: ActiveMQ
>          Issue Type: Bug
>          Components: Geronimo Integration
>    Affects Versions: 4.1.2, 5.2.0
>         Environment: Windows XP + SUN JDK 1.5
>            Reporter: Shawn Jiang
>         Attachments: AMQ-2094.patch
>
>
> ActiveMQ server socket created with TcpTransportServer  can't bind to localhost or actuall
IP correctly.  
> * expected result:
> ** localhost  ---> bind to 127.0.0.1
> ** actual IP  ----> bind to  actual IP
> * actual result:
> ** localhost  ---> bind to 0.0.0.0
> ** actual IP  ----> bind to 0.0.0.0
> {code:title="org.apache.activemq.transport.tcp.TcpTransportServer"}  
>       InetAddress addr = InetAddress.getByName(host);
>        try {
>            if (host.trim().equals("localhost") || \
> addr.equals(InetAddress.getLocalHost())) {  //#1 start the socket with 0.0.0.0
>             this.serverSocket = \
> serverSocketFactory.createServerSocket(bind.getPort(), backlog);  }
>            else {
>             //#2  start the socket with the ip spcified in addr.
>             this.serverSocket = \
> serverSocketFactory.createServerSocket(bind.getPort(), backlog, addr);  }
> {code}
> Since if you config the real IP as a host setting, \
> addr.equals(InetAddress.getLocalHost()) will allways be true so that the #1 will be used
to start the socket with 0.0.0.0 by default.  Which causes a defect of geronimo: https://issues.apache.org/jira/browse/GERONIMO-4404

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message