CVE:CVE-2002-2426
CNNVD:CNNVD-200212-804
Citrix Presentation Server 4.0 和4.5版本， MetaFrame Presentation Server 3.0版本， 和 Access Essentials 1.0 到 2.0版本存在跨站请求伪造（CSRF）漏洞。远程攻击者如身份验证的用户借助ICA连接中InitialProgram密钥执行任意发布的应用程序和其他可能的程序。
solution:Upgrade citrix access_essentials to a higher version than 1.0,1.5,2.0,and avoid the version 1.0,1.5,2.0; Upgrade citrix metaframe_presentation_server to a higher version than 3.0,and avoid the version 3.0; Upgrade citrix presentation_server to a higher version than 4.0,4.5,and avoid the version 4.0,4.5