JR28764: CSWIN RAPIPIPE ANONYMOUS ACCESS MAY BE SECURITY CONCERN

Communications Server for Windows, Version 6.1.2 -- Latest Fix Pack
Communications Server for Windows, Version 6.1.3 -- Latest Fixpack

APAR status

• Closed as program error.

Error description

• Communications Server for Windows, Version 6.1
  ----------------------------------------------
  The rapiserver service creates and uses a named pipe called
  RAPIPipe that is available for anonymous access. When the
  service is stopped, the pipe is remove. This pipe may be
  considered by some as a potential security concern.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of CS/WIN.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: The rapiserver service creates and      *
  *                      uses a named pipe called RAPIPipe that  *
  *                      is available for anonymous access.      *
  *                      When the service is stopped, the pipe   *
  *                      is removed. This pipe may be            *
  *                      considered by some as a potential       *
  *                      security concern.                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  IBM has re-evaluated the need for the anonymous pipe.
  

Problem conclusion

• The code has been modified so that anonymous access is not
  needed for RAPIPipe and that RAPIPPipe is not created with
  anonymous access enabled.
  

Temporary fix

• adrapiutil.dll
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• ADRAPIUT
  

Fix information

• Fixed component name

  COMM SERV NT 6.

• Fixed component ID

  5639F2503

Applicable component levels

• R612 PSY

     UP

• R613 PSY

     UP