CVE-2007-2850 The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security polici...
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix access essentials | = 1.0 | No fix listed |
| citrix access essentials | = 1.5 | No fix listed |
| citrix metaframe | = 3.0 | No fix listed |
| citrix metaframe | = 4.0 | No fix listed |
References
- fortconsult.net
- 25371 patch third-party-advisory vendor-advisory
- support.citrix.com
- 1018098 vdb-entry
- ADV-2007-1918 vdb-entry
- citrix-session-security-bypass(34448) vdb-entry