ME
Product
Metaframe
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Metaframe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-2850 | – | May 24 | The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass… Affected: 3.0; 3.0; 3.0; 4.0; 4.0; 4.0 |
| CVE-2007-0444 | – | Jan 24 | Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local… Affected: 1.0 |
| CVE-2006-5821 | – | Nov 10 | Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote… Affected: 1.0; 3.0 |
| CVE-2006-5861 | – | Nov 10 | The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a… Affected: 1.0; 2.0 |
| CVE-2006-3779 | – | Jul 24 | Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain… Affected: 1.8; 1.8 |
| CVE-2005-3134 | – | Oct 4 | Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name… Affected: 3.0; 4.0 |
| CVE-2003-1157 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message… Affected: 1.0 |
| CVE-2001-0716 | – | Dec 6 | Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of… Affected: through xp_server_service_pack_1; 1.8; xp_server |
| CVE-2001-0908 | – | Nov 21 | CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their… Affected: 1.8 |
| CVE-2000-0244 | – | Mar 29 | The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication Affected: through 1.8; through 1.8; 1.0 |
Showing 10