CVEvulnerability

CVE-2001-0908

7.5 HIGH Published 2001-11-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-11-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).

Affected configurations

• citrix metaframe 1.8

Related

Referenced by CWE · observed example (1)

  • CWE-348 Use of Less Trusted Source weakness

References