Description
Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled.
References
- 20010514 Cable-Router AR220e Portmapper Security-Flaw mailing-list
- telesyn-portmapper-access-services(6560) vdb-entry