Re: UPnP attack

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



John Wendel wrote:
Alan Cox wrote:
On Sat, 19 Jan 2008 06:43:59 +0900
John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote:

Les wrote:
Hi, guys,     I just got this from a Tech Republic newsletter:
http://blogs.techrepublic.com.com/tech-news/?p=1902

    Basically it notes a form of attack using port forwarding by use of
Flash and Javacode.  However, probably other scripting languages could
be used.  It is not OS or browser dependent, but rather depends on the
standard protocols of UPnP and and the Flash plug-in programing
standard _windows_ protocol. I've not heard of Linux doing it.

UPnP is a dreadful protocol but its perfectly possible to do it on Linux.
UPnP is an abomination for managing/controlling routers and other devices
so its quite possible your router talks it



Azureus uses it to automagically open ports on your router (if you let it).

Best to disable it in your router config.


Right you are, is used in most of the most popular and common routers.
LinkSys definitely uses it on more than one model.

-Max

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux