Citrix MetaFrame Multiple Sessions Denial of Service Vulnerability

Bugtraq ID:	3440
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 16 2001 12:00AM
Updated:	Oct 16 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by X-Force <[email protected]> on October 16, 2001.
Vulnerable:	Citrix MetaFrame for Windows NT 4.0 TSE 1.8 - Microsoft Windows NT Terminal Server 4.0 Citrix MetaFrame for Windows 2000 1.8 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional Citrix MetaFrame XP - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional
Not Vulnerable:

Citrix MetaFrame Multiple Sessions Denial of Service Vulnerability

Citrix MetaFrame is a remote application server used for terminal service type environments.

A vunerability exists in Citrix MetaFrame which, if exploited, could lead to a denial of services to network users.

If an unusal number of connections are made to a host and eventually time out, any attempts for additional connections could cause the host to crash.

Citrix MetaFrame Multiple Sessions Denial of Service Vulnerability

References:

• Citrix Homepage (Citrix)