Description
The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.
References
- 20040831 SSHD / AnonCVS Nastyness mailing-list
- openssh-port-bounce(17213) vdb-entry
- 1011143 vdb-entry
- 9562 vdb-entry
- https://security.netapp.com/advisory/ntap-20191107-0001/