CVE-2007-2850 Security feature bypass in n/a
Remote attackers can bypass network security policies to connect to arbitrary TCP ports in Citrix Presentation Server via a modified address string.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-2850?
CVE-2007-2850 is a critical vulnerability in n/a, published on 24 May 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Which versions are affected by CVE-2007-2850?
It affects 2 products.
Products include Citrix Access Essentials, Citrix Metaframe.
How do I fix CVE-2007-2850?
No fix has been published for CVE-2007-2850 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-2850 being exploited?
There is no known exploitation of CVE-2007-2850 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-955q-2rmr-5vhw.