Re: Exploiting any network protocol with secondarydatachannelsopened from the server

[weinmann () RBG INFORMATIK TU-DARMSTADT DE (Ralf-Philipp Weinmann)]

On Sun, 19 Mar 2000, H D Moore wrote:

[...]
> Could this applet be used to relay connections to an internal network?
> Say your target is a dual-homed machine and your applet binds to the
> external interface and then forward connections to an internal address.
> Is this possible?

No. The java security manager will only allow you to connect to the
machine the applet was loaded from unless the applet has a trustworthy
signature. Although there have been bugs in the past which allowed
to circumvent that by DNS trickery (browser checked the dns name
instead of the ip address) those should now be long extinct.

Cheers,
-Ralf

--
Ralf-P. Weinmann <weinmann () rbg informatik tu-darmstadt de>
PGP fingerprint: 2048/46C772078ACB58DEF6EBF8030CBF1724