Unscored severity · published Oct 4, 2005
CVE-2005-3134
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Metaframe · Citrix
3.0; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3134
marc.info
http://marc.info/?l=bugtraq&m=112811189420696&w=2
Vendor Advisory
http://secunia.com/advisories/17032/
securityreason.com
http://securityreason.com/securityalert/39
securitytracker.com
http://securitytracker.com/id?1014994
support.citrix.com
http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705
Exploit
http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt
More from Metaframe
–
CVE-2007-2850
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass…
–
CVE-2007-0444
Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local…
–
CVE-2006-5821
Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote…
–
CVE-2006-5861
The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a…
–
CVE-2006-3779
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain…