Lucene search

[email protected]CVE-2006-5861

HistoryNov 10, 2006 - 11:07 p.m.

CVE-2006-5861

2006-11-1023:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

citrix

ima service

denial of service

vulnerability

cve-2006-5861

nvd

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.487 Medium

EPSS

Percentile

97.5%

JSON

The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service (service exit) via a crafted packet that causes the service to access an unmapped memory address and triggers an unhandled exception.

CPENameOperatorVersion
citrix:metaframe_presentation_servercitrix metaframe presentation servereq4.0
citrix:metaframecitrix metaframeeq2.0
citrix:metaframe_presentation_servercitrix metaframe presentation servereq3.0
citrix:metaframecitrix metaframeeq1.0

CPE	Name	Operator	Version
citrix:metaframe_presentation_server	citrix metaframe presentation server	eq	4.0
citrix:metaframe	citrix metaframe	eq	2.0
citrix:metaframe_presentation_server	citrix metaframe presentation server	eq	3.0
citrix:metaframe	citrix metaframe	eq	1.0

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=441

secunia.com/advisories/22802

securitytracker.com/id?1017205

support.citrix.com/article/CTX111186

www.securityfocus.com/bid/20986

www.vupen.com/english/advisories/2006/4429

exchange.xforce.ibmcloud.com/vulnerabilities/30156

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.487 Medium

EPSS

Percentile

97.5%

JSON

Related for CVE-2006-5861

cvelist1 checkpoint_advisories1