Re: Re: w00w00 on AIM Filter (Backdoors & SpyWare)

[Joseph S D Yao <jsdy () center osis gov>]

On Wed, Jan 09, 2002 at 09:26:38PM -0800, Crispin Cowan wrote:
...
> > Exactly how does a firewall protect against this type of attack? 
>
> By blocking IM protocols so you won't use these vulnerable applications :-)

We've found that the latest AIM client can go out through some HTTP
proxies, then try an array of different outgoing ports until it has
hooked up to the login server.  We can apparently get to AIM, Yahoo,
and others this way (ICQ).  We haven't looked at the full range of
behaviours.

-- 
Joe Yao                         jsdy () center osis gov - Joseph S. D. Yao
OSIS Center Systems Support                                     EMT-B
-----------------------------------------------------------------------
   This message is not an official statement of OSIS Center policies.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards