CVE-2008-0356

2008-01-1822:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-0356

buffer overflow

citrix presentation server

ima service

remote code execution

security vulnerability

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.836 High

EPSS

Percentile

98.5%

JSON

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

CPENameOperatorVersion
citrix:metaframe_presentation_servercitrix metaframe presentation serverle4.5
citrix:presentation_servercitrix presentation servereq*
citrix:desktop_servercitrix desktop servereq1.0
citrix:access_essentialscitrix access essentialsle2.0

CPE	Name	Operator	Version
citrix:metaframe_presentation_server	citrix metaframe presentation server	le	4.5
citrix:presentation_server	citrix presentation server	eq	*
citrix:desktop_server	citrix desktop server	eq	1.0
citrix:access_essentials	citrix access essentials	le	2.0