Lucene search
MitreCVE-2006-3779HistoryJul 24, 2006 - 12:19 p.m.
CVE-2006-3779
2006-07-2412:19:00
mitre
web.nvd.nist.gov
24
citrix
metaframe
xp
1.0
acl
vulnerability
security
nvd
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
75.8%
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.
Affected configurations
Node
citrixmetaframeMatch1.8microsoft_nt_4.0_server_terminal_server
ORcitrixmetaframeMatch1.8microsoft_windows_2000
ORcitrixmetaframe_presentation_serverMatch3.0microsoft_windows_2000
ORcitrixpresentation_serverMatch4.0microsoft_windows_2000
| Vendor | Product | Version | CPE |
|---|---|---|---|
| citrix | metaframe | 1.8 | cpe:2.3:a:citrix:metaframe:1.8:*:microsoft_nt_4.0_server_terminal_server:*:*:*:*:* |
| citrix | metaframe | 1.8 | cpe:2.3:a:citrix:metaframe:1.8:*:microsoft_windows_2000:*:*:*:*:* |
| citrix | metaframe_presentation_server | 3.0 | cpe:2.3:a:citrix:metaframe_presentation_server:3.0:*:microsoft_windows_2000:*:*:*:*:* |
| citrix | presentation_server | 4.0 | cpe:2.3:a:citrix:presentation_server:4.0:*:microsoft_windows_2000:*:*:*:*:* |
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
75.8%
Related for CVE-2006-3779