Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

port 12378

0 views
Skip to first unread message

Bob Balsman

unread,
Mar 13, 2002, 11:19:02 AM3/13/02
to
Is there a valid service or program which would listen on port 12378? This
is the port listed in the W32/GIBE vulnerability.

Regards,
Bob


Norman S. Miller

unread,
Mar 13, 2002, 6:33:55 PM3/13/02
to
"Bob Balsman" <bobba...@msn.com> wrote in message news:ev1J6qqyBHA.1184@tkmsftngp03...

Both Netmeeting and ICQ file transfer might use that port. Ports higher than 5000 are not normally "assigned" to any particular program, but are available to any program trying to connect out. Both Netmeeting and ICQ, and probably a slew of other programs as well, will dynamically assign any port from about 5000 up to 65535, as necessary, to accomplish a connection. That's what makes it such a pita to figure out how to forward ports through a NAT device for these programs.

Of course, the preceding is a description of legitimate programs; nothing precludes malicious programs from using *any* port for outbound communications. You have to understand what programs and services you have really need what connections.

--
Norman Miller

~I am tired of munging. To reply by email,
just edit the subject line to include the
initials of the group; i.e., [M.P.W.S].
Square brackets, and all between; else
your message won't break through the
Hotmail spamkiller.~

0 new messages