MetaFrame Conferencing Manager Keyboard And Mouse Control Issue

Tuesday, 15 March 2005 by Michel Roth

A new vulnerability was identified in Citrix MetaFrame Conferencing Manager, which may be exploited by attackers to bypass certain security features. MetaFrame Conferencing Manager allows the conference host to determine which attendees can control the keyboard and mouse. In some situations conference attendees are able to gain control over the keyboard and mouse even though they have not been granted the rights to do so.

Note :Attackers would not be in a position to exploit this vulnerability unless they had already gained access to the conference. Conference users must be explicitly invited to the conference by the conference organizer before they can gain access to a conference.

Solution: Hotfix MCM300W012

Read more here.