CVE-2004-1653

CVE-2004-1653 describes a vulnerability in OpenSSH's default configuration where AllowTcpForwarding is enabled, potentially allowing remote authenticated users to perform a port bounce, especially when integrated with anonymous access programs like AnonCVS. With a CVSS score of 6.4, this vulnerability has a network attack vector and low attack complexity, leading to potential partial confidentiality and integrity impacts. Despite its age, recent media coverage indicates attackers are leveraging this decade-old flaw to target IoT devices, transforming them into proxies for malicious traffic, though no public exploit code or Metasploit modules are readily available.