Subject: Vserver and localhost sniffing
From: Alejandro Cabrera <alejandro_facultad@yahoo.com.ar>
Date: Mon, 25 Feb 2008 10:14:12 -0800 (PST)
Mon, 25 Feb 2008 10:14:12 -0800 (PST)
Dear all, I read that if I have a vserver host with lo (127.0.0.1) and some vserver
guests with lo 127.0.0.2, 127.0.0.3, etc...there is a

risk that some guest root can use some type of sniffer (cap) and sniff the traffic across
127.0.0.1 that is ALL localhost traffic (including 127.0.0.2, 127.0.0.3, etc.). This
is a serious security problem.



Here is my question: what happen with localhost sniffing if I assign a private IP to
the guest localhosts in order to replace 127.0.0.2,

127.0.0.3, etc. with 192.168.0.2, 192.168.0.3, etc.??? Guest roots can still sniff the
traffic ???



Special thanks



Alejandro



      Tarjeta de crédito Yahoo! de Banco Supervielle.
Solicitá tu nueva Tarjeta de crédito. De tu PC directo a tu casa. www.tuprimeratarjeta.com.ar


Dear all, I read that if I have a vserver host with lo (127.0.0.1) and some vserver guests with lo 127.0.0.2, 127.0.0.3, etc...there is a
risk that some guest root can use some type of sniffer (cap) and sniff the traffic across 127.0.0.1 that is ALL localhost traffic (including 127.0.0.2, 127.0.0.3, etc.). This is a serious security problem.

Here is my question: what happen with localhost sniffing if I assign a private IP to the guest localhosts in order to replace 127.0.0.2,
127.0.0.3, etc. with 192.168.0.2, 192.168.0.3, etc.??? Guest roots can still sniff the traffic ???

Special thanks

Alejandro



Yahoo! Encuentros
Ahora encontrar pareja es mucho más fácil, probá el nuevo Yahoo! Encuentros.
Visitá http://yahoo.cupidovirtual.com/servlet/NewRegistration