Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.
| Software | From | Fixed in |
|---|---|---|
| citrix / metaframe | 1.8 | 1.8.x |
| citrix / presentation_server | 4.0 | 4.0.x |
| citrix / metaframe_presentation_server | 3.0 | 3.0.x |