Bugtraq mailing list archives

Proxy+ Telnet Gateway Problems

From: wizdumb () UNIX ZA NET (Andrew Lewis)
Date: Mon, 26 Jun 2000 19:58:20 +0200


The Problem:
------------
Many admins who use Proxy+ configure the remote administration port (which
works over HTTP) to only accept connections from the localhost.
Fortunately enough, the admin port doesn't allow connections which have
been bounced through the HTTP proxy. The telnet proxy, on the other hand,
is a different story. Oops.

Workaround:
-----------
Enable HTTP Basic authentication instead. And don't trust localhost only
security for anything.

Credit:
-------
Andrew Lewis aka. Wizdumb, One of the many losers from the MDMA crew
<www.mdma.za.net>

Current thread:

Re: [Stan Bubrouski <satan () FASTDIAL NET>: Re: rh 6.2 - gidcompromises, etc [+ MORE!!!]] Frank da Cruz (Jun 23)
- Possible root exploit in ISC DHCP client. Ted Lemon (Jun 24)
  - Re: Possible root exploit in ISC DHCP client. Security (Jun 28)
- Re: [Stan Bubrouski <satan () FASTDIAL NET>: Re: rh 6.2 - gidcompromises, etc [+ MORE!!!]] Mitchell Blank Jr (Jun 24)
- <Possible follow-ups>
- Re: [Stan Bubrouski <satan () FASTDIAL NET>: Re: rh 6.2 - gidcompromises, etc [+ MORE!!!]] Frank da Cruz (Jun 24)
  - Re: [Stan Bubrouski <satan () FASTDIAL NET>: Re: rh 6.2 - gidcompromises, etc [+ MORE!!!]] Stan Bubrouski (Jun 24)
  - Proxy+ Telnet Gateway Problems Andrew Lewis (Jun 26)
    - BOA Webserver local path problem Ian Shaughnessy (Jun 27)