Design/Logic Flaw

2009-07-1414:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

CPENameOperatorVersion
presentation_servereq4.5 windowsserver2003x64
presentation_servereq4.5 fp1
presentation_servereq4.5 windowsserver2003
presentation_servereq4.5 se
xenappeq4.5 fp3

Name	Operator	Version
presentation_server	eq	4.5 windowsserver2003x64
presentation_server	eq	4.5 fp1
presentation_server	eq	4.5 windowsserver2003
presentation_server	eq	4.5 se
xenapp	eq	4.5 fp3

References

osvdb.org/53900

secunia.com/advisories/34865

support.citrix.com/article/CTX118792

www.securityfocus.com/bid/34691

www.securitytracker.com/id?1022114

www.vupen.com/english/advisories/2009/1154