PT-2004-2053 · Citrix · Citrix Program Neighborhood Agent+1

Published 2004-04-26 · Updated 2008-09-05 · CVE-2004-1077

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Citrix Program Neighborhood Agent for Win32 versions 8.00.24737 and earlier Citrix MetaFrame Presentation Server client for WinCE versions prior to 8.33

Description: The issue allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

Recommendations: For Citrix Program Neighborhood Agent for Win32 versions 8.00.24737 and earlier, update to a version later than 8.00.24737. For Citrix MetaFrame Presentation Server client for WinCE versions prior to 8.33, update to version 8.33 or later.

Fix

Related Identifiers

CVE-2004-1077

Affected Products

Citrix Metaframe Presentation Server

Citrix Program Neighborhood Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-1077 · Security Note
• http://support.citrix.com/kb/entry.jspa?externalID=CTX105650 · Vendor Advisory
• http://secunia.com/advisories/15108 · Vendor Advisory
• http://idefense.com/application/poi/display?id=237&type=vulnerabilities · Vendor Advisory