Description
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
References
- netcache-tunnel-default-configuration(6807) vdb-entry
- 2990 vdb-entry
- 20010705 RE: Tunnel ports allowed on NetApp NetCaches mailing-list