Lucene search

K
rustsecRustsecRUSTSEC-2023-0001
HistoryJan 04, 2023 - 12:00 p.m.

reject_remote_clients Configuration corruption

2023-01-0412:00:00
rustsec.org
24
windows
named pipe
server configuration
rejection of remote clients
software

EPSS

0.001

Percentile

47.1%

On Windows, configuring a named pipe server with pipe_mode will force ServerOptions::reject_remote_clients as false.

This drops any intended explicit configuration for the reject_remote_clients that may have been set as true previously.

The default setting of reject_remote_clients is normally true meaning the default is also overridden as false.

Workarounds

Ensure that pipe_mode is set first after initializing a ServerOptions. For example:

let mut opts = ServerOptions::new();
opts.pipe_mode(PipeMode::Message);
opts.reject_remote_clients(true);