OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jenny Holmberg (jchalgo.net)
Date: Tue Mar 05 2002 - 01:13:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Michiel Heijkoop <myselfmhil.net> writes:

    > As the URL indicates, it's well possible that the webserver only
    > listens to 127.0.0.1, which wouldn't make it a large security risk,
    > unless its ran on an NT-machine under an admin-account and accessed
    > by a regular user, which could then have read-access to files,
    > he/she shouldn't have it to. Perhaps someone with Realplayer
    > installed can check wether this miniserver is binding to all
    > interfaces, or just the loopback?

    On my WinME box, RealPlayer binds only to the loopback interface. Also
    it chooses different ports each time, which (depending, of course, on
    how the port numbers are chosen) would presumably make it somewhat
    harder to exploit. 

    -- 
"I live in the heart of the machine. We are one."