Description
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.
References
- vshell-port-forwarding-rule(6148) vdb-entry
- A021601-1 vendor-advisory
- 2402 vdb-entry
- http://www.vandyke.com/products/vshell/security102.html