BugTraq
Google Picasa Listening on Port 80? Aug 11 2006 12:28PM
Geoff Vass (geoff cadzow com au) (1 replies)
RE: Google Picasa Listening on Port 80? Aug 14 2006 08:47PM
Kameron Gasso (kgasso-lists visp net)
Geoff Vass <mailto:geoff (at) cadzow.com (dot) au [email concealed]> wrote on Friday, August 11, 2006
5:28 AM:

> I'm using Picasa 2.5 Beta (32.43), and I notice from Sysinternals'
> TCPVIEW app that it is listening on port 80. So I fire up the
> browser, and sure enough, http://localhost returns a blank page. When
> I close Picasa, the browser returns "The page cannot be displayed".
>
> What a great idea, a user-mode graphics application listening on the
> most attacked port!
>
> Picasa 2.2 (28.20) doesn't do this.
>
> Cheers
> Geoff Vass

Hi,

After doing a little digging, the Picasa 2.5 Beta only appears to only bind
to the localhost interface. Outside attack hopefully wouldn't be an issue,
but I can forsee some serious conflicts with other applications running
locally on the user's PC if there's not a simple method of disabling this,
and I'm not seeing an option to disable this in the app itself. Guess
that's why it's a Beta. :)

Thanks,

Kameron Gasso
kgasso (at) visp (dot) net [email concealed]

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus