CVE-2001-0908

CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients…

published February 2, 2002

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01406 · 72.2th percentile
Published
2002-02-02T05:00Z
EPSS history
Timeline
  • 02 FEB 05:00Z
    CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients…
    cvelistv5