CVE-2006-3779: Citrix Metaframe

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.

Affected products

• Citrix Metaframe: version 1.8 only
• Citrix Metaframe Presentation Server: version 3.0 only
• Citrix Presentation Server: version 4.0 only

Published 2006-07-24. Last modified 2026-06-16.