Citrix Products Session Reliability Service Security Bypass - Secunia Advisories - Vulnerability Intelligence

Citrix Products Session Reliability Service Security Bypass
Secunia Advisory:	SA25371	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2007-05-23
Last Update:	2007-06-01
Popularity:	6,300 views

Critical:	Less critical
Impact:	Security Bypass
Where:	From local network
Solution Status:	Vendor Patch

Software:	Citrix Access Essentials 1.x Citrix MetaFrame Presentation Server 3.x Citrix Presentation Server 4.x

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2007-2850

Description: Andrew Christensen has reported a security issue in various Citrix products, which can be exploited by malicious people to bypass certain security restrictions. The problem is that the Session Reliability Service allows the client to specify a target host and port to connect to. This can be exploited to e.g. bypass network security policies and connect to arbitrary ports on a target machine. Successful exploitation requires that the Session Reliability feature is enabled. The security issue affects the following products: * Citrix MetaFrame Presentation Server 3.0 * Citrix Presentation Server 4.0 * Citrix Access Essentials 1.0 * Citrix Access Essentials 1.5 Solution: Apply hotfix. MetaFrame Presentation Server 3.0 for Windows 2000 Server: EN - http://support.citrix.com/article/CTX112818 FR - http://support.citrix.com/article/CTX112821 DE - http://support.citrix.com/article/CTX112819 JA - http://support.citrix.com/article/CTX112820 ES - http://support.citrix.com/article/CTX112822 MetaFrame Presentation Server 3.0 for Windows Server 2003: EN - http://support.citrix.com/article/CTX112813 FR - http://support.citrix.com/article/CTX112816 DE - http://support.citrix.com/article/CTX112814 JA - http://support.citrix.com/article/CTX112815 ES - http://support.citrix.com/article/CTX112817 Citrix Presentation Server 4.0 for Windows 2000 Server: EN - http://support.citrix.com/article/CTX112844 FR - http://support.citrix.com/article/CTX112847 DE - http://support.citrix.com/article/CTX112845 JA - http://support.citrix.com/article/CTX112848 ES - http://support.citrix.com/article/CTX112846 Citrix Presentation Server 4.0 for Windows Server 2003: EN - http://support.citrix.com/article/CTX112839 FR - http://support.citrix.com/article/CTX112842 DE - http://support.citrix.com/article/CTX112840 JA - http://support.citrix.com/article/CTX112843 ES - http://support.citrix.com/article/CTX112841 Citrix Presentation Server 4.0 for Windows Server 2003 x64 Editions: EN - http://support.citrix.com/article/CTX112886 FR - http://support.citrix.com/article/CTX112887 DE - http://support.citrix.com/article/CTX112888 JA - http://support.citrix.com/article/CTX112890 ES - http://support.citrix.com/article/CTX112889 Citrix Access Essentials 1.0: EN - http://support.citrix.com/article/CTX112839 FR - http://support.citrix.com/article/CTX112842 DE - http://support.citrix.com/article/CTX112840 ES - http://support.citrix.com/article/CTX112841 Citrix Access Essentials 1.5: EN - http://support.citrix.com/article/CTX112839 FR - http://support.citrix.com/article/CTX112842 DE - http://support.citrix.com/article/CTX112840 ES - http://support.citrix.com/article/CTX112841 Provided and/or discovered by: Andrew Christensen, FortConsult Changelog: 2007-06-01: Added CVE reference. Original Advisory: Citrix: http://support.citrix.com/article/CTX112964 FortConsult: http://www.fortconsult.net/images/pdf/Citrix_Session-Reliability_OpenProxy.pdf

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

10th Oct, 2008

New advisories:	15
New vulnerabilities:	83
Updated advisories:	41

Moderately // 533 views

ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability

Moderately // 531 views

Built2go Real Estate Listings "event_id" SQL Injection

Highly // 780 views

Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow

Moderately // 564 views

Red Hat update for cups

Highly // 574 views

DFF PHP Framework API "DFF_config[dir_incl ude]" File Inclusion Vulnerabilities

Not // 643 views

FUJITSU Interstage Products Apache Tomcat Security Bypass

Moderately // 871 views

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Moderately // 549 views

Fedora update for condor

Moderately // 902 views

CUPS Multiple Vulnerabilities

Not // 621 views

Gentoo Portage Insecure Python Module Search Path Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.