CVE-2006-3779: Medium severity Citrix Metaframe vulnerability
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3779?
CVE-2006-3779 is considered a medium severity vulnerability due to the potential for privilege escalation by authenticated remote users.
How do I fix CVE-2006-3779?
To fix CVE-2006-3779, ensure that proper access control lists (ACLs) are set for the affected registry keys.
What versions of Citrix are affected by CVE-2006-3779?
CVE-2006-3779 affects Citrix MetaFrame up to version 1.8, Citrix Presentation Server version 4.0, and Citrix MetaFrame Presentation Server version 3.0 on Windows 2000.
Can CVE-2006-3779 be exploited remotely?
Yes, CVE-2006-3779 can be exploited remotely by authenticated users to gain elevated privileges.
Is CVE-2006-3779 specific to any operating system?
CVE-2006-3779 is specifically noted to not affect installations on Windows Server 2003.