5454 matches found
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
Design/Logic Flaw
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
CVE-2008-5107
CVE-2008-5107 affects Citrix Presentation Server 4.5 and Citrix Desktop Server 1.0. When MSI logging is enabled, the installation process stores database credentials in MSI log files, allowing local users to read them and obtain credentials. Root cause described as the logging process exposing se...
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
KLA10112 OSI vulnerability in Citrix
An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can obtain information. This vulnerability can be exploited locally at a point related to MSI logging. Original advisories Citrix bulletin Related products Citrix-Presentation-Server CVE li...
Citrix Web接口安全绕过漏洞
BUGTRAQ ID: 31943 CNCAN ID：CNCAN-2008102902 Java Application Servers的Citrix web接口存在漏洞，可导致断开进程未能正确终止用户的WEB接口会话。这允许其他验证用户使用相同浏览器实例获得对已经存在WEB接口会话的未授权访问 此漏洞值影响WEB接口5.0和5.0.1，Java Application Servers的旧版本web接口和所有针对Microsoft IIS的WEB接口版本不受此漏洞影响。 Citrix Web Interface 5.0.1 Citrix Web Interface 5.0 Citrix...
NetScaler web management XSS
The remote web server is prone to cross-site scripting attacks. Description : The remote Citrix NetScaler web management interface is susceptible to cross-site scripting attacks. OpenVAS Vulnerability Test $Id: netscalerwebxss.nasl 4489 2016-11-14 08:23:54Z teissa $ Description: NetScaler web...
KLA10115 SB vulnerability in Citrix Web Interface
An unspecified vulnerability was found in the Citrix Secure Gateway. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed request. Original advisories Citrix bulletin Related products...
Citrix NetScaler Web Management Login (HTTP)
The scanner successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright...
NetScaler Web Management 'CVE-2007-6037' XSS Vulnerability - Active Check
The remote Citrix NetScaler web management interface is susceptible to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
NetScaler web management cookie information
It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Citrix NetScaler Detection (HTTP)
HTTP based detection of Citrix NetScaler. SPDX-FileCopyrightText: 2008 nnposter SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...
Design/Logic Flaw
Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...
CVE-2008-4676
Summary: CVE-2008-4676 describes an unspecified local privilege-escalation vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0. The issue is triggered by unknown attack vectors related to cr...
Security Best Practice: Blocking Citrix ICA Vulnerabilities
Independent Computing Architecture ICA is a proprietary protocol for an application server system, designed by Citrix Systems. The protocol lays down a specification for passing data between server and clients. ICA is broadly similar in purpose to window servers such as the X Window System. It al...
Design/Logic Flaw
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path...