Lucene search
HistoryFeb 02, 2002 - 5:00 a.m.
CVE-2001-0908
cve-2001-0908
citrix metaframe
ip spoofing
network address translation
network security.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.0%
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
Affected configurations
Node
citrixmetaframeMatch1.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| citrix:metaframe | citrix metaframe | eq | 1.8 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.0%
Related for CVE-2001-0908