CVE-2005-3134 Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix metaframe | = 3.0 | No fix listed |
| citrix metaframe | = 4.0 | No fix listed |
References
- 20050930 Citrix Metaframe Presentation Server bypassing policies mailing-list
- 17032 third-party-advisory vendor-advisory
- 39 third-party-advisory
- 1014994 vdb-entry
- support.citrix.com
- www.grupoitpro.com.ar exploit vendor-advisory
- 14989 vdb-entry