[Mldonkey-bugs] [bugs #12376] Gaping security hole (GIFT gui support)

[anonymous]

Follow-up Comment #1, bugs #12376 (project mldonkey):


Never dealt with Gift port, nor with the gift itself ... since gift is a
different project, there is probably a problem implementing any type of
authentication. Both sides would need to implement such a thing.

Just a short question ... aren't connections to the gift port at least
checked against allowed_ips?
(I know, that this is not realy sufficent ...)


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=12376>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/