← Vulnerability feed

Vulnerability record · CVE-2006-3779 · published 24 July 2006

CVE-2006-3779: Citrix metaframe vulnerability

Citrix · Metaframe

Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.

6.5 CVSS 2.0 Medium EPSS 1.3% · top 30.3%
6.5CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.

AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/21076 PatchVendor Advisory
http://securitytracker.com/id?1016526
http://support.citrix.com/article/CTX110492 Patch
http://www.securityfocus.com/bid/19056 Patch
http://www.vupen.com/english/advisories/2006/2862
http://secunia.com/advisories/21076 PatchVendor Advisory
http://securitytracker.com/id?1016526
http://support.citrix.com/article/CTX110492 Patch
http://www.securityfocus.com/bid/19056 Patch
http://www.vupen.com/english/advisories/2006/2862

Track CVE-2006-3779 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-0356Citrix Presentation Server IMA Service Buffer OverflowThe Independent Management Architecture (IMA) service in Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop S…EPSS 73%analysed10.0CVE-2007-2850Citrix access essentials vulnerabilityThe Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows…EPSS 2.8%10.0CVE-2000-0244Citrix metaframe vulnerabilityThe Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.EPSS 2.3%7.5CVE-2009-2453Citrix presentation server permissions and access controls vulnerabilityCitrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Adva…EPSS 1.4%7.5CVE-2006-5821Citrix metaframe vulnerabilityHeap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 …EPSS 5.2%7.5CVE-2005-3134Citrix metaframe vulnerabilityCitrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changin…EPSS 2.1%7.5CVE-2001-0908Citrix metaframe vulnerabilityCITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allow…EPSS 1.4%7.2CVE-2008-3485Citrix metaframe presentation server permissions and access controls vulnerabilityUntrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed i…EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2006-3779), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.