PT-2011-39: Denial of Service in Citrix XenServer Workload Balancer

Positive Research Center has discovered a Denial of Service vulnerability in Citrix XenServer Workload Balancer. Remote attackers can cause an unhandled exception in the DwmWebSvc component by sending a specially crafted HTTP request. How to fix Update your software up to the latest version...

PT-2011-40: Multiple CSRF vulnerabilities in Citrix License Administration Console

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix License Administration Console. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...

PT-2011-32: Cross-site scripting in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "Cross-site scripting" vulnerability in Citrix XenServer Web Self Service. Since special characters in usernames are not properly escaped a stored XSS attack is possible. How to fix Update your software up to the latest version Advisor...

PT-2011-35: Multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...

PT-2011-37: HTTP Response Splitting in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered a HTTP Response Splitting in Citrix XenServer Virtual Switch Controller. GET parameter lastpage of the login page allows one to insert an arbitrary HTTP header into the server response. How to fix Update your software up to the latest version Advisory statu...

PT-2011-38: URL redirector abuse in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an URL redirector abuse in Citrix XenServer Virtual Switch Controller. URL redirector GET parameter lastpage of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix Update your software up...

PT-2011-31: Multiple Cross-Site Request Forgery vulnerabilities in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "Cross-Site Request Forgery" vulnerabilities in Citrix XenServer Web Self Service. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your...

PT-2011-41: Stored XSS vulnerability in Citrix License Administration Console

Positive Research Center has discovered a Stored XSS vulnerability in Citrix License Administration Console. Since special characters in usernames are not properly escaped, a stored XSS attack is possible. How to fix Update your software up to the latest version Advisory status 10.11.2011 - Vendo...

KLA10113 ACE vulnerability in Citrix Program Neighborhood

An unspecified vulnerability was found in the Citrix Program Neighborhood. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed associated file. Original advisories Citrix bulletin Related products...

Citrix GoToMyPC Detection

Binary data 2045.prm...

Citrix Provisioning Services StreamProcess.exe Remote Code Execution (CTX130846)

The version of the StreamProcess.exe component included with the Citrix Provisioning Services installation running on the remote Windows host is affected by a remote code execution vulnerability in the Ardence.CMessageUtils.fromMgrString function in Manager.dll. An unauthenticated, remote attacke...

Citrix XenApp/XenDesktop Multiple Code Execution Vulnerabilities (credentialed check)

The remote Windows host has the Citrix XML Service, a component of Citrix XenApp and XenDesktop, installed. According to its version number, the Citrix XML service installed on the remote host is affected by multiple code execution vulnerabilities when handling specially crafted HTTP POST request...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Citrix Gateway - ActiveX Control Stack Buffer Overflow (Metasploit)

$Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow

$Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

This module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in...