All this is indicating is that the process listening on that address and port has 'requested' the ability to receive connections from any IP address on any port. Until a connection is made the process appears as being connected to nothing in this way (asterisk).
Foreign Address - The IP address and port number of the remote computer to which the socket is connected. The names that corresponds to the IP address and the port are shown unless the -n parameter is specified. If the port is not yet established, the port number is shown as an asterisk (*).
Because this process is listening on
127.0.0.1, it is secured in that only addresses in the
127.0.0.0/8 range can make a connection, which is a range exclusively reserved for connections only possible by other processes running on that system.