Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Subject: RealServer exposes internal IP addresses
From: tschweikleFIDUCIA.DE
Date: Wed Mar 08 2000 - 05:41:33 CST

RealServer exposes internal IP addresses if requested to
deliver real media files: -> HTTP
  GET /ramgen/extern/genoverb/weinkauf.rm HTTP/1.0 -> HTTP
  (proxy) R port=1210 -> HTTP
  HTTP/1.0 200 OK -> HTTP

The Server is located inside a DMZ. Network-Address
translation is in effect from internet as is from campus.

In my opinion this may be usedfull for an intruder, and
RealNetworks should fix this. I've informed them about
6 weeks ago, calling them again four weeks later, then
14 days ago, but no reaction on there side until now.