CVE:CVE-2009-2453
CNNVD:CNNVD-200907-240
Citrix XenApp (过去叫 Presentation Server) 4.5 Hotfix Rollup Pack 3在被Access Gateway Advanced Edition filters限定时，不能运用访问凭证(access policy)，这会允许攻击者通过未知向量来绕过预期的访问限制。
solution:Upgrade citrix presentation_server to a higher version than 4.5,4.5:fp1,and avoid the version 4.5,4.5:fp1; Upgrade citrix xenapp to a higher version than 4.5:fp3,and avoid the version 4.5:fp3