bugtraq - Google Picasa Listening on Port 80?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CFFC854DED4AAA47B963CD330509AEE51F6734@server.CADZOW2000.com.au>
Date: Fri, 11 Aug 2006 21:58:29 +0930
From: "Geoff Vass" <geoff@...zow.com.au>
To: <bugtraq@...urityfocus.com>
Subject: Google Picasa Listening on Port 80?

I'm using Picasa 2.5 Beta (32.43), and I notice from Sysinternals'
TCPVIEW app that it is listening on port 80. So I fire up the browser,
and sure enough, http://localhost returns a blank page. When I close
Picasa, the browser returns "The page cannot be displayed".

What a great idea, a user-mode graphics application listening on the
most attacked port!

Picasa 2.2 (28.20) doesn't do this.

Cheers
Geoff Vass