Unscored severity · published Jul 14, 2009
CVE-2009-2453
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Presentation Server · Citrix
4.5; 4.5; 4.5; 4.5 · source: NVD
XE
Xenapp · Citrix
4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2453
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2453
osvdb.org
http://osvdb.org/53900
Vendor Advisory
http://secunia.com/advisories/34865
Patch
http://support.citrix.com/article/CTX118792
Patch
http://www.securityfocus.com/bid/34691
Patch
http://www.securitytracker.com/id?1022114
Patch
http://www.vupen.com/english/advisories/2009/1154
More from Presentation Server
–
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local…
–
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows…
–
CVE-2008-2299
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause…
–
CVE-2008-0356
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and…
–
CVE-2006-3779
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain…