Description
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
References
- http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705
- 1014994 vdb-entry
- 20050930 Citrix Metaframe Presentation Server bypassing policies mailing-list
- 39 third-party-advisory
- 14989 vdb-entry
- http://www.grupoitpro.com.ar/ctxpoliciesbypass.txt
- 17032 third-party-advisory