CVE-2007-2850
Last modified
CVE-2007-2850 is a vulnerability of currently unknown severity. The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.. EPSS estimates a 2.82% chance of exploitation in the next 30 days.
Description
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Access Essentials | 1.0 |
| Citrix | Access Essentials | 1.5 |
| Citrix | Metaframe | 3.0 |
| Citrix | Metaframe | 4.0 |
References
- http://secunia.com/advisories/25371Patch, Vendor Advisory
- http://secunia.com/advisories/25371Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-2850?
How severe is CVE-2007-2850?
How do I fix CVE-2007-2850?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-2844PHP 4.x and 5.x before 5.2.1, when running on multi-threaded…
- CVE-2007-2845Heap-based buffer overflow in the CAB unpacker in avast! Ant…
- CVE-2007-2846Heap-based buffer overflow in the SIS unpacker in avast! Ant…
- CVE-2007-2847Multiple cross-site scripting (XSS) vulnerabilities in hlsta…
- CVE-2007-2848Stack-based buffer overflow in the SetPath function in the s…
- CVE-2007-2849KnowledgeTree Document Management (aka KnowledgeTree Open So…
- CVE-2007-2851A certain ActiveX control in LeadTools Raster Variant Object…
- CVE-2007-2852Multiple stack-based buffer overflows in ESET NOD32 Antiviru…
- CVE-2007-2853The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in V…
- CVE-2007-2854Multiple SQL injection vulnerabilities in account_change.php…
- CVE-2007-2855Buffer overflow in a certain ActiveX control in DartZipLite.…
- CVE-2007-2856Buffer overflow in the Dart Communications PowerTCP ZIP Comp…
Are you affected by CVE-2007-2850?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST