Tom and all, I could not reproduce this problem. My NFuse 1.6 server seems to redirect to the login page if I try to connect directly to applist.asp. Cheers, Jeff Mills -----Original Message----- From: Tom.Lyne@kamino.com [mailto:Tom.Lyne@kamino.com] Sent: Wednesday, 23 January 2002 2:58 To: bugtraq@securityfocus.com Subject: Citrix NFuse 1.6 Dear Reader, It seems if you go to an NFuse servers 'applist.asp' page without first authenticating it reveals a list of all the applications that are configured as published applications. Seems like an easily preventable information leak from a default setup, Rgds, Tom Lyne
