Citrix NFuse Launch Scripts 'NFuse_Application' Parameter XSS

The remote version of Citrix NFuse contains a flaw that allows a remote cross-site scripting attack. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Citrix Server Detection

Binary data 1924.prm...

Citrix MetaFrame Published Application Enumeration

Binary data 1945.prm...

Citrix MetaFrame Service Enumeration

Binary data 1953.prm...

Citrix GoToMyPC Client Detection

Binary data 6055.prm...

Citrix Web Interface 4.6/5.0/5.0.1 XSS

Binary data 5010.prm...

Citrix MetaFrame XP login.asp NFuse_Message Parameter XSS

The remote server is running a Citrix Web Interface server that is vulnerable to cross-site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a cross-site scripting attack...

cqure.net.20040430.citrixmetaframe

Hi, The following advisory has been released by cqure.net. The severity level has been set to low, as in Citrix's advisory available at; http://support.citrix.com/kb/entry.jspa?entryID=4289&categoryID=118 The reason for the low severity is the fact that you have to be local admin on the Citrix...

Citrix Metaframe client disk access

Server administrator can access client drives...

CVE-2004-1077

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...

CVE-2004-1078

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element...

CVE-2003-1157

Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...

IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scripting

---------------------------------------------------------------------------- IRM Security Advisory No. 008 Citrix Metaframe XP is vulnerable to Cross Site Scripting Vulnerablity Type / Importance: XSS / Medium Problem discovered: August 18th 2003 Vendor contacted: August 18th 2003 Advisory...

Citrix Metaframe crossite scripting

login.asp crossite scripting...

Citrix Metaframe XP - Cross-Site Scripting

Citrix Metaframe XP - Cross-Site Scripting source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in...

Citrix Metaframe XP - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in page. Exploitation of this issue could...

Citrix NFuse Server launch.asp Arbitrary Server/Port Redirect

The remote Citrix NFuse Webserver is vulnerable to a bug wherein any anonymous user can force the server to redirect to any arbitrary IP and Port. Among other things, this flaw can allow an external attacker to use the Citrix server as a rudimentary port scanner of either another network or the...

CVE-2002-2426

Cross-site request forgery CSRF vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the...

Citrix Published Applications Remote Enumeration

It is possible for a remote attacker to enumerate published applications that are allowed on the affected Citrix server. This script was written by John Lampe ... [email protected] Script is based on Citrix Published Application Scanner version 2.0 By Ian Vitek, [email protected] See th...

Citrix Published Applications - Information Disclosure

source: https://www.securityfocus.com/bid/5908/info A vulnerability has been discovered in Citrix. It is possible for an attacker to obtain information regarding Published Applications, by sending specially crafted requests to the Citrix server, and examining responses. By bruteforcing a Citrix...