MobaXTerm before version 8.5 vulnerability in "jump host" functionality

Posted by Thomas Bleier on Jan 08

== Description ==

MobaXTerm (http://www.mobatek.net/), a Windows SSH/RDP/VNC/etc. client, includes
a functionality to open remote sessions via a so-called “jump host” or “SSH
gateway”. In the end this creates a “SSH Port Forward” by binding a local port on
the machine running MobaXTerm to forward all traffic to the specified destination
host via the jump host through a SSH tunnel (-L option in OpenSSH), and that…

Leave a Reply