Re: RealPlayer bug

From: Michiel Heijkoop (myselfat_private)
Date: Sun Mar 03 2002 - 13:17:10 PST

  • Next message: Toni Lassila: "RE: IIS SMTP component allows mail relaying via Null Session"

    Hey,
    
    On Sat, Mar 02, 2002 at 09:16:53PM +0300, §ome1 wrote:
    > http://127.0.0.1:1275/template.html?src=file://C:/music/file.ram
    > from now realplay.exe will listen on port 1275 TCP
    As the URL indicates, it's well possible that the webserver only listens to 127.0.0.1, which wouldn't make it a large security risk, unless its ran on an NT-machine under an admin-account and accessed by a regular user, which could then have read-access to files, he/she shouldn't have it to. Perhaps someone with Realplayer installed can check wether this miniserver is binding to all interfaces, or just the loopback?
    



    This archive was generated by hypermail 2b30 : Mon Mar 04 2002 - 15:03:14 PST