citrix-overflow.txt

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var...

Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit ==================================================================== Citrix Presentation Server Client...

Citrix Presentation Server Client - 'WFICA.OCX' ActiveX Heap Buffer Overflow

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Citrix Presentation Server heap based buffer overflow

Overview A heap-based buffer overflow in Citrix Presentation Server may allow a remote attacker to execute arbitrary code on an vulnerable system in the context of the system user. Description Citrix Presentation Server is an application delivery system providing access to users accross a network...

ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability

ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-002.html January 17, 2008 -- Affected Vendor: Citrix -- Affected Products: Metaframe Presentation Server 3.0 Presentation Server 4.0, 4.5 Access Essentials 1.0, 1.5, 2...

Citrix Presentation Server buffer overflow

IMA serviceTCP/2512, TCP/2513 heap buffer overflow...

DSquare Exploit Pack: D2SEC_IMASRV

Name| d2secimasrv ---|--- CVE| CVE-2008-0356 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server 4.0 IMA Service Heap Overflow Notes|...

Immunity Canvas: CITRIX_METAFRAME

Name| citrixmetaframe ---|--- CVE| CVE-2008-0356 Exploit Pack| CANVAS Description| Citrix IMA Heap Overflow Demo Notes| CVSS: 10.0 Repeatability: This is a one shot exploit. VENDOR: Citrix CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0356 CVE Name: CVE-2008-0356...

Buffer overflow

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

CVE-2008-0356

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

CVE-2008-0356

CVE-2008-0356 describes a heap-based buffer overflow in Citrix Presentation Server’s Independent Management Architecture (IMA) service (ImaSrv.exe). By sending crafted packets to the IMA ports 2512/2513, an unauthenticated remote attacker could overflow a heap buffer and execute arbitrary code wi...

CVE-2008-0356

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

CVE-2008-0356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

Citrix Metaframe Presentation Server IMA Service Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Independent Management Architecture service, ImaSrv.exe, which listens by default...

Cross site scripting

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6477

Technical details for CVE-2007-6477 are not publicly available in the provided documents. No concrete information on affected products, root cause, or remediation is provided here. Monitor for updates.

CVE-2007-6477

Cross-site scripting XSS vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...