10

CVE-2007-2850

The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Access Essentials Version1.0
Citrix ≫ Access Essentials Version1.5
Citrix ≫ Metaframe Version3.0 Editionmicrosoft_windows_2000
Citrix ≫ Metaframe Version3.0 Editionmicrosoft_windows_2003
Citrix ≫ Metaframe Version3.0 Editionx64_edition
Citrix ≫ Metaframe Version4.0 Editionmicrosoft_windows_2000
Citrix ≫ Metaframe Version4.0 Editionmicrosoft_windows_2003
Citrix ≫ Metaframe Version4.0 Editionx64_edition
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.82% 0.847
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf
http://secunia.com/advisories/25371
Patch
Vendor Advisory
http://support.citrix.com/article/CTX112964
http://www.securitytracker.com/id?1018098
http://www.vupen.com/english/advisories/2007/1918
https://exchange.xforce.ibmcloud.com/vulnerabilities/34448