Vulnerability Development mailing list archives

Re: MSProxy Server 2


From: brycewalter () HOTMAIL COM (Bryce Walter)
Date: Fri, 2 Jun 2000 15:37:25 GMT


Proxy 2 runs as an ISAPI application on top of IIS 3/4/5.  Many of the holes
that affect IIS will also take down Proxy... buffer overflows, etc.


Is anyone aware of any security holes in MSProxy Server 2.0? I've been
studying for the exam and reallized that you can use a proxy client to get
easier access to a remote network or site by entering in the remote ip into
the client or proxy's LAT file and supplying the appropriate routing
information in your routing table. In effect makeing your network think
that
the remote network is part of your local net. If anyone has seen anything
like this will you please let me know.

Logicbug

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


Current thread: