CVE-2001-0760: Medium severity Citrix Nfuse vulnerability
Published Oct 18, 2001
·Updated
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
Affected Software
1 affected component
Citrix Nfuse=1.51
Event History
Oct 18, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0760?
CVE-2001-0760 is considered a medium severity vulnerability as it can lead to information disclosure.
2
How do I fix CVE-2001-0760?
To fix CVE-2001-0760, ensure that session validation is properly implemented in your Citrix NFuse application.
3
What type of attack does CVE-2001-0760 enable?
CVE-2001-0760 enables remote attackers to exploit the system and obtain the absolute path of the web root.
4
Which version of Citrix NFuse is affected by CVE-2001-0760?
CVE-2001-0760 specifically affects Citrix NFuse version 1.51.
5
Is there a workaround for CVE-2001-0760?
A possible workaround for CVE-2001-0760 is to restrict access to the launch.asp file and monitor incoming requests.