PT-2001-2062 · Citrix · Citrix Metaframe

Publicado 2001-11-21 · Atualizado 2017-12-19 · CVE-2001-0908

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CITRIX Metaframe version 1.8

Description The issue allows clients to spoof their public IP address by logging the Client Address provided by the client instead of obtaining it from packet headers. This can be exploited through Network Address Translation (NAT).

Recommendations For CITRIX Metaframe version 1.8, consider implementing a mechanism to obtain the client's IP address from packet headers instead of relying on the client-provided address to prevent IP spoofing.

Correção

Identificadores relacionados

CVE-2001-0908

Produtos afetados

Citrix Metaframe

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0908 · Nota de Segurança
• http://securityfocus.com/bid/3566 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0908 · Nota
• http://marc.info/?l=bugtraq&m=100638693315933&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7538 · Nota