Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).
http://www.securityfocus.com/bid/14989
http://support.citrix.com/kb/entry%21default.jspa?categoryID=275&externalID=CTX107705
http://securitytracker.com/id?1014994
http://securityreason.com/securityalert/39