Lucene search

PRIOn knowledge basePRION:CVE-2007-2850

HistoryMay 24, 2007 - 6:30 p.m.

Design/Logic Flaw

2007-05-2418:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.5%

JSON

The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.

CPENameOperatorVersion
access_essentialseq1.0
access_essentialseq1.5
metaframeeq4.0 microsoftwindows2003
metaframeeq4.0 x64-edition
metaframeeq3.0 x64-edition
metaframeeq4.0 microsoftwindows2000
metaframeeq3.0 microsoftwindows2003
metaframeeq3.0 microsoftwindows2000

Name	Operator	Version
access_essentials	eq	1.0
access_essentials	eq	1.5
metaframe	eq	4.0 microsoftwindows2003
metaframe	eq	4.0 x64-edition
metaframe	eq	3.0 x64-edition
metaframe	eq	4.0 microsoftwindows2000
metaframe	eq	3.0 microsoftwindows2003
metaframe	eq	3.0 microsoftwindows2000

References

fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf

secunia.com/advisories/25371

support.citrix.com/article/CTX112964

www.securitytracker.com/id?1018098

www.vupen.com/english/advisories/2007/1918

exchange.xforce.ibmcloud.com/vulnerabilities/34448

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.5%

JSON

Related for PRION:CVE-2007-2850

cve1