Hello!
I think that some people already know this, but anyway. Here is a decription of a problem
http://seclists.org/fulldisclosure/2014/Jul/76
Can someone explain - if client is vulnerable when it does not use vpn server for internet access (just uses intranet)?
