Design/Logic Flaw

2007-05-2418:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.063 Low

EPSS

Percentile

93.6%

JSON

The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.

CPENameOperatorVersion
access_essentialseq1.0
access_essentialseq1.5
metaframeeq4.0 microsoftwindows2003
metaframeeq4.0 x64-edition
metaframeeq3.0 x64-edition
metaframeeq4.0 microsoftwindows2000
metaframeeq3.0 microsoftwindows2003
metaframeeq3.0 microsoftwindows2000

Name	Operator	Version
access_essentials	eq	1.0
access_essentials	eq	1.5
metaframe	eq	4.0 microsoftwindows2003
metaframe	eq	4.0 x64-edition
metaframe	eq	3.0 x64-edition
metaframe	eq	4.0 microsoftwindows2000
metaframe	eq	3.0 microsoftwindows2003
metaframe	eq	3.0 microsoftwindows2000

References

fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf

secunia.com/advisories/25371

support.citrix.com/article/CTX112964

www.securitytracker.com/id?1018098

www.vupen.com/english/advisories/2007/1918

exchange.xforce.ibmcloud.com/vulnerabilities/34448