10

CVE-2007-2850

The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Access Essentials Version 1.0
Citrix ≫ Access Essentials Version 1.5
Citrix ≫ Metaframe Version 3.0 Edition microsoft_windows_2000
Citrix ≫ Metaframe Version 3.0 Edition microsoft_windows_2003
Citrix ≫ Metaframe Version 3.0 Edition x64_edition
Citrix ≫ Metaframe Version 4.0 Edition microsoft_windows_2000
Citrix ≫ Metaframe Version 4.0 Edition microsoft_windows_2003
Citrix ≫ Metaframe Version 4.0 Edition x64_edition
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.82% 0.847
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf
http://secunia.com/advisories/25371
Patch
Vendor Advisory
http://support.citrix.com/article/CTX112964
http://www.securitytracker.com/id?1018098
http://www.vupen.com/english/advisories/2007/1918
https://exchange.xforce.ibmcloud.com/vulnerabilities/34448