NVD

Id
81377  
Name
CVE-2002-2426  
Description
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-05  
Published
2002-12-31  
Modified Date
2011-03-07  
Seq
2002-2426  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
404166 81377 CVE-2002-2426 http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt  View
404167 81377 CVE-2002-2426 http://support.citrix.com/article/CTX115245  View
404168 81377 CVE-2002-2426 26451  View
404169 81377 CVE-2002-2426 1018962  View
404170 81377 CVE-2002-2426 ADV-2007-3870  View

Related JVN