CVE-2009-2453

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

• CWE-264

• http://osvdb.org/53900
• http://secunia.com/advisories/34865Vendor Advisory
• http://support.citrix.com/article/CTX118792Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34691Patch
• http://www.securitytracker.com/id?1022114Patch
• http://www.vupen.com/english/advisories/2009/1154Patch, Vendor Advisory
• http://osvdb.org/53900
• http://secunia.com/advisories/34865Vendor Advisory
• http://support.citrix.com/article/CTX118792Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34691Patch
• http://www.securitytracker.com/id?1022114Patch
• http://www.vupen.com/english/advisories/2009/1154Patch, Vendor Advisory

Published

Jul 14, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2447Multiple cross-site scripting (XSS) vulnerabilities in ogp_s…
• CVE-2009-2448Cross-site scripting (XSS) vulnerability in ogp_show.php in …
• CVE-2009-2449Directory traversal vulnerability in maillinglist/admin/chan…
• CVE-2009-2450The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu …
• CVE-2009-2451Multiple SQL injection vulnerabilities in index.php in MIM:I…
• CVE-2009-2452Multiple unspecified vulnerabilities in Citrix Licensing 11.…
• CVE-2009-2454Cross-site scripting (XSS) vulnerability in Citrix Web Inter…
• CVE-2009-2455Multiple cross-site scripting (XSS) vulnerabilities in webad…
• CVE-2009-2456The DS\NDSD component in Novell eDirectory 8.8 before SP5 al…
• CVE-2009-2457The DS\NDSD component in Novell eDirectory 8.8 before SP5 al…
• CVE-2009-2458Unspecified vulnerability in Sun Fire V215 Server, when usin…
• CVE-2009-2459Multiple unspecified vulnerabilities in mimeTeX, when downlo…