Citrix Metaframe Presentation Server IMA Service Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Independent Management Architecture service, ImaSrv.exe, which listens by default...

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6477

Technical details for CVE-2007-6477 are not publicly available in the provided documents. No concrete information on affected products, root cause, or remediation is provided here. Monitor for updates.

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Microsoft Internet Explorer元素标签内存破坏漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分文档对象存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理那些被建立，修改，删除后的文档对象然后通过JavaScript访问，通过存储到文档节点的引用，然后通过分离引用删除它们，内存中的文档模型会变的不稳定。当处于这个不稳定状态时访问标签属性可导致堆破坏，可能导致任意代码执行 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...

Microsoft Internet Explorer DHTML对象内存破坏漏洞

BUGTRAQ ID: 26427 CVE ID:CVE- 2007-5347 CNCVE ID:CNCVE-20075347 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分特殊构建的HTML对象方法存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...

CVE-2007-6267

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information...

Information disclosure

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information...

CVE-2007-6267

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information...

CVE-2007-6267

CVE-2007-6267 affects Citrix EdgeSight components: Presentation Server (4.2/4.5), Endpoints (4.2/4.5), and NetScaler EdgeSight (1.0/1.1). The root cause is improper storage of database credentials in configuration files, enabling local users to obtain sensitive information. The available sources ...

NetScaler Web Management Interface Cookie Credentials Encryption Weakness

The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fixed key stream. %NASLMINLEVEL 70300 netscalerwebcookiecrypto.nasl GPLv2 History:...

NetScaler Web Management ws/generic_api_call.pl standalone Parameter XSS

The remote Citrix NetScaler web management interface is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 netscalerwebxss.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE and updated copyright 10/18/2012...

NetScaler Unencrypted Web Management Interface

The remote Citrix NetScaler web management interface does not use TLS or SSL to encrypt connections. %NASLMINLEVEL 70300 netscalerwebunencrypted.nasl GPLv2 Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE and updated copyright 10/18/2012 - Corrected encryption testing 1/2/2018 -...

NetScaler Web Management Interface IP Address Cookie Information Disclosure

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...

Citrix Application Delivery Controller (ADC) / Citrix NetScaler Detection

The remote host appears to be a Citrix ADC previously NetScaler, an appliance for web application delivery, and the remote web server is its management interface. netscalerwebdetect.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE...

NetScaler Web Management Successful Authentication

Nessus successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. netscalerweblogin.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added...

CVE-2007-6192

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

Design/Logic Flaw

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...