[greglindahl]

Yes. This same thing can be used to attack web crawlers: you can cajole the crawler into making web requests to localhost or private networks.