CVE-2005-3134
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
| Software | From | Fixed in |
|---|---|---|
| citrix / metaframe | 4.0 | 4.0.x |
| citrix / metaframe | 3.0 | 3.0.x |
- http://marc.info/?l=bugtraq&m=112811189420696&w=2
- http://secunia.com/advisories/17032/
- http://securityreason.com/securityalert/39
- http://securitytracker.com/id?1014994
- http://support.citrix.com/kb/entry!default.jspa?categoryID=275&externalID=CTX107705
- http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705
- http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt
- http://www.securityfocus.com/bid/14989
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime