Citrix XenServer Multiple Security Updates (CTX201145)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

Citrix XenServer QEMU FDC Buffer Overflow RCE (CTX201078) (VENOM)

The remote host is running a version of Citrix XenServer that is affected by a flaw in the Floppy Disk Controller FDC in the bundled QEMU software due to an overflow condition in hw/block/fdc.c when handling certain commands. An attacker, with access to an account on the guest operating system wi...

Citrix XenServer Multiple Vulnerabilities (CTX200892)

The version of Citrix XenServer installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in the VGA emulator in QEMU that allows a local guest user to read host memory by setting the display to a high resolution. CVE-2014-3615 - A flaw exists in the setpixelformat...

Citrix XenServer Multiple Security Updates (CTX200892)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities could, if exploited, allow a malicious administrator of an HVM guest to compromise the host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced...

Citrix XenServer Shellshock Security Update (CTX200223)

A number of security vulnerabilities have been identified in the bash SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix XenServer Multiple Security Updates (CTX140984)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.2 Service Pack 1. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be...

Citrix XenServer Multiple Vulnerabilities (CTX200288)

The remote host is running a version of Citrix XenServer that is affected by multiple vulnerabilities : - A local privilege escalation vulnerability exists due to improperly restricted access to 'PHYSDEVOPprepare,releasemsix' operations by unprivileged guests. An attacker with access to a guest...

Citrix XenServer Multiple Vulnerabilities (CTX140984)

The remote host is running a version of Citrix XenServer that is affected by multiple vulnerabilities : - An information disclosure exists due to the Xen hypervisor's failure to properly clean memory pages. CVE-2014-4021 - An unspecified vulnerability exists due to a buffer overflow in the HVM...

Citrix XenServer Detection

Binary data citrixxenserverversion.nbin...

CVE-2014-4948

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

CVE-2014-4947

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

Hardcoded credentials

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

Buffer overflow

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

CVE-2014-4947

CVE-2014-4947 describes a buffer overflow in the HVM graphics console support of Citrix XenServer, affecting XenServer 6.2 Service Pack 1 and earlier. The connected sources corroborate that the issue concerns the HVM graphics console, with the CVE clearly stated as a buffer overflow and with unsp...

CVE-2014-4947

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

CVE-2014-4948: Undefined Security Weakness

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

CVE-2014-4947: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors...

citrix xencenterweb (xss/sql/rce) Multiple Vulnerabilities

No description provided by source. Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero...

Citrix XenServer Tools Detection

Binary data xenservertoolsinstalled.nbin...

Citrix XenServer Windows Guest Tools Remote DoS

The remote Windows host has a vulnerable version of XenServer Tools that may allow a remote, unauthenticated attacker to crash the host by sending specially crafted packets. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid74328; scriptversion"1.5"; scriptcvsdate"Date:...