Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

question re security risk with SSH tunnelling

from [GregHauptmann] Network Security [Permanent Link]
Subject: question re security risk with SSH tunnelling
Date: Sun, 2 Dec 2007 16:39:22 -0800 (PST) 

Hi,

If an SSH tunnel is created and used to allow say HTTP browser traffic to
occur from client to server, what security risks (if any) are introduced by
this tunnel?  e.g.

- ability for other rogue apps on the client to use the tunnel to get to the
server?
- ability for other rogue apps on the server (with the web app) to use the
tunnel to attach the client?
- does the tunnel effectively "join" the networks? 

Assume for example use of Putty to SSH to the server, but with a tunnel
specified to forward local say port 7777 traffic to the server host xxxx on
port yy.  

Tks




-- 
View this message in context: 
http://www.nabble.com/question-re-security-risk-with-SSH-tunnelling-tf4933827.html#a14122149
Sent from the SSH (Secure Shell) mailing list archive at Nabble.com.
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • question re security risk with SSH tunnelling, GregHauptmann <=
Next by Date:  Re: ssh-rand-helper processes, Darren Tucker
Next by Thread:  Re: ssh-rand-helper processes, Darren Tucker
Indexes:  [Date] [Thread] [Top] [All Lists]