NVD

Id
55010  
Name
CVE-2007-2850  
Description
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-24  
Modified Date
2014-07-31  
Seq
2007-2850  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279321 55010 CVE-2007-2850 http://fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf  View
279322 55010 CVE-2007-2850 http://support.citrix.com/article/CTX112964  View
279323 55010 CVE-2007-2850 1018098  View
279324 55010 CVE-2007-2850 ADV-2007-1918  View
279325 55010 CVE-2007-2850 citrix-session-security-bypass(34448)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53383 JVNDB-2007-002075 Citrix MetaFrame Presentation Server などの製品で使用される XTE におけるネットワークセキュリティポリシーを回避される脆弱性 Citrix MetaFrame Presentation Server、Presentation Server および Access Essentials の Session Reliability Service (XTE) には、ネットワークセキュリティポリシーを回避され、任意の TCP ポートに接続される脆弱性が存在します。 CVE-2007-2850 26205 CVE-2007-2850 55010 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002075.html 2007-05-23 2012-06-26 View