CVE-2012-3496

XENMEMpopulatephysmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service BUG triggered and host crash via invalid flags such as MEMFpopulateondemand...

CVE-2012-3496: Undefined Security Weakness

XENMEMpopulatephysmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service BUG triggered and host crash via invalid flags such as MEMFpopulateondemand...

CVE-2012-3498: Improper Input Validation

PHYSDEVOPmappirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service host crash and possibly read hypervisor or guest memory via vectors related to a missing range check of map-index...

CVE-2012-3516: Undefined Security Weakness

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

CVE-2012-3494: Undefined Security Weakness

The setdebugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service host crash by writing to the reserved bits of the DR7 debug control register...

Citrix XenServer本地权限提升漏洞(CVE-2012-4606)

CVE ID: CVE-2012-4606 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer存在本地权限提升漏洞，可以访问客户端操作系统的本地攻击者可利用此漏洞在受影响计算机上获取提升的权限。 0 Citrix XenServer 6.0 Citrix XenServer 5.x Citrix XenServer 4.1 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.citrix.com/...

Privilege Escalation in Intel® Hybrid Cloud (IHC)

Summary: A Citrix XenServer potential vulnerability has recently been reported that could pose a security risk to any system using XenServer Hypervisor, including the Intel® Hybrid Cloud IHC platform which uses Citrix XenServer VMM as the virtualization platform. While we are not aware of any...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

CVE-2012-0217: Improper Restriction of Operations within the Bounds of a Memory Buffer

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

Citrix XenServer vSwitch Controller Component Multiple Vulnerabilities

Citrix XenServer is prone to multiple unspecified vulnerabilities. The impact of these issues is currently unknown. We will update this BID when more information emerges. Citrix XenServer versions 5.6, 5.6 FP 1, 5.6 SP 2, and 6 are vulnerable. OpenVAS Vulnerability Test $Id:...

Citrix XenServer vSwitch Controller < 2.0.0+build11349 Multiple Vulnerabilities

The Citrix XenServer vSwitch Controller instance running on the remote host is affected by multiple, unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid58810; scriptversion"1.5";...

Citrix XenServer vSwitch Controller Detection

Citrix XenServer vSwitch Controller, a web interface for managing virtual machine networking, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58809; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Citrix XenServer...

Citrix XenServer Workload Balancer Detection

Citrix XenServer Workload Balancer, a daemon for migrating virtual machines between Xen hosts based on load, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58749; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25";...

PT-2011-39: Denial of Service in Citrix XenServer Workload Balancer

Positive Research Center has discovered a Denial of Service vulnerability in Citrix XenServer Workload Balancer. Remote attackers can cause an unhandled exception in the DwmWebSvc component by sending a specially crafted HTTP request. How to fix Update your software up to the latest version...

PT-2011-34: HTTP Response Splitting in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "HTTP Response Splitting" vulnerability in Citrix XenServer Web Self Service. GET parameter page of the login page allows one to insert an arbitrary HTTP header into the server response. How to fix Update your software up to the latest...

PT-2011-33: URL redirector abuse in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "URL redirector abuse" vulnerability in Citrix XenServer Web Self Service. URL redirector GET parameter page of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix...

PT-2011-36: Insufficient authorization in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an insufficient authorization in Citrix XenServer Virtual Switch Controller. Low privileged Read-Only users can change certain configuration parameters e.g. hostname and domain. Configuration snapshots that contain the entire system configuration including...

PT-2011-32: Cross-site scripting in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "Cross-site scripting" vulnerability in Citrix XenServer Web Self Service. Since special characters in usernames are not properly escaped a stored XSS attack is possible. How to fix Update your software up to the latest version Advisor...

PT-2011-35: Multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...