Re: Phrack #60: "Java tears down the Firewall"

["Marcus J. Ranum" <mjr () ranum com>]

Mikael Olsson wrote:
> - The firewall automagically pokes a hole for this "data channel"
> - The server box is suddenly allowed to connect to this 
>  vulnerable port, through the firewall.

Could the java app proxy to other ports internally? Seems
like a simple exercise for the malcoder.

mjr.

---
Marcus J. Ranum                         http://www.ranum.com
Computer and Communications Security    mjr () ranum com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards