CVE-2001-0908: High severity Citrix Metaframe vulnerability
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0908?
CVE-2001-0908 is considered a high severity vulnerability due to the ability of clients to spoof their public IP address.
How do I fix CVE-2001-0908?
To fix CVE-2001-0908, you should upgrade to a newer version of Citrix MetaFrame that addresses this vulnerability.
What does CVE-2001-0908 affect?
CVE-2001-0908 affects Citrix MetaFrame version 1.8.
What is the impact of CVE-2001-0908?
The impact of CVE-2001-0908 is that it allows unauthorized access and potential abuse of the system by spoofing IP addresses.
Is CVE-2001-0908 still relevant today?
CVE-2001-0908 remains relevant for organizations that still utilize Citrix MetaFrame 1.8, exposing them to IP spoofing risks.