[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: critical security vulnaribility fixed in Tor 0.1.2.16

So in order to get attacked and get the torrc file modified, you first have to get infected by a worm, virus, malware or trojan horse that communicates with localhost:9051?
There is no way that someone could directly attack me through port 9051 behind a physical firewall? Is this correct?
If this is correct, then the chance of getting attacked behind a physical firewall is very low, right?

/Viking


coderman skrev: 
On 8/4/07, vikingserver@xxxxxxxxx <vikingserver@xxxxxxxxx> wrote:
  
 Please describe a little bit.
 Please describe how someone can reach port 9051 behind a firewall.
    

port 9051 is usually bound to localhost (127.0.0.1).  a firewall
(usually) protects against external connections.  applications /
utilities bound to localhost can access other ports bound to this
address.

best regards,