Description
The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143.
References
- 1016056 vdb-entry
- cisco-avs-unauth-tcp-relay(26351) vdb-entry
- ADV-2006-1762 vdb-entry
- 17937 vdb-entry
- 20079 third-party-advisory
- 25459 vdb-entry
- 20060510 AVS TCP Relay Vulnerability vendor-advisory