5454 matches found
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
No description provided by source. $Id: citrixstreamprocess.rb 13042 2011-06-27 18:00:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
citrix xencenterweb (xss/sql/rce) Multiple Vulnerabilities
No description provided by source. Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero...
Citrix Nfuse 1.51 Webroot Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2956/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed webserver. It has been...
Citrix NFuse 1.51/1.6 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4372/info Citrix NFuse is an application portal server meant to provide the functionality of any application on the server via a web browser. NFuse works in conjunction with a previously-installed webserver. NFuse is said...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020002 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Citrix MetaFrame Web Manager - 'login.asp' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27948/info Citrix MetaFrame Web Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...
Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...
Citrix Metaframe for Windows NT 4.0 TSE 1.8 Java ICA Environment DoS
No description provided by source. source: http://www.securityfocus.com/bid/5439/info Citrix Metaframe is a commercial available remote desktop application. This issue affects Metaframe on the Microsoft Windows platform. It has been discovered that Metaframe can be made to become unstable. By...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020004 Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Citrix Presentation Server Client WFICA.OCX ActiveX - Heap BOF Exploit
No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...
Citrix Published Applications Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5908/info A vulnerability has been discovered in Citrix. It is possible for an attacker to obtain information regarding Published Applications, by sending specially crafted requests to the Citrix server, and examining...
Citrix MetaFrame 1.0/1.8 Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain...
Citrix Access Gateway Command Execution
No description provided by source. $Id: citrixaccessgatewayexec.rb 11873 2011-03-03 20:51:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
No description provided by source. $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
No description provided by source. $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Citrix Metaframe XP Cross-site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in page...
Citrix NetScaler 8.0 build 47.8 Generic_API_Call.PL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26491/info Citrix NetScaler is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Citrix NetScaler nsconfigd Remote DoS (CTX139017)
The remote Citrix NetScaler version is affected by a remote denial of service vulnerability in the 'nsconfigd' daemon. An unauthenticated remote attacker could exploit this issue by sending a specially crafted message to the daemon, resulting in a reboot of the appliance. C Tenable Network...
CVE-2011-2592
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header...
Heap overflow
Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header...