CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2006-3779
https://notcve.org/view.php?id=CVE-2006-3779
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges. Citrix MetaFrame para XP 1.0 característica 1, excepto cuando funciona sobre Windows Server 2003, instala una llave de registro con un ACL no seguro, lo cual permite a usuarios remotos validos ganar privilegios. • http://secunia.com/advisories/21076 http://securitytracker.com/id?1016526 http://support.citrix.com/article/CTX110492 http://www.securityfocus.com/bid/19056 http://www.vupen.com/english/advisories/2006/2862 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2005-3134
https://notcve.org/view.php?id=CVE-2005-3134
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName). • http://marc.info/?l=bugtraq&m=112811189420696&w=2 http://secunia.com/advisories/17032 http://securityreason.com/securityalert/39 http://securitytracker.com/id?1014994 http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705 http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt http://www.securityfocus.com/bid/14989 •
CVSS: 4.3EPSS: 1%CPEs: 6EXPL: 0CVE-2002-2426
https://notcve.org/view.php?id=CVE-2002-2426
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information. • http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt http://secunia.com/advisories/27633 http://support.citrix.com/article/CTX115245 http://www.gnucitizen.org/blog/citrix-owning-the-legitimate-backdoor http://www.securityfocus.com/bid/26451 http://www.securitytracker.com/id?1018962 http://www.vupen.com/english/advisories/2007/3870 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 5.0EPSS: 1%CPEs: 3EXPL: 0CVE-2001-0716
https://notcve.org/view.php?id=CVE-2001-0716
Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server. • http://www.securityfocus.com/bid/3440 http://xforce.iss.net/alerts/advise99.php https://exchange.xforce.ibmcloud.com/vulnerabilities/7068 •