6026 matches found
CVE-2003-1157: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...
CVE-2004-1902: Undefined Security Weakness
The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...
CVE-2005-0821
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...
iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability
Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability iDEFENSE Security Advisory 04.26.05 www.idefense.com/application/poi/display?id=237&type=vulnerabilities April 26, 2005 I. BACKGROUND Citrix Program Neighborhood Agent is a part of the Citrix Presentation Server Client an...
Citrix Program Neighborhood Agent multiple vulnerabilities
Buffer overflow, code execution with startup folders...
CVE-2004-1078
CVE-2004-1078 refers to a stack-based buffer overflow in the Citrix Program Neighborhood Agent client for Win32 (versions 8.00.24737 and earlier) and the Citrix MetaFrame Presentation Server client for WinCE (before 8.33). The vulnerability is triggered by a crafted long cached icon filename in t...
CVE-2004-1077
CVE-2004-1077 affects Citrix Program Neighborhood Agent for Win32 (v8.00.24737 and earlier) and MetaFrame Presentation Server client for WinCE before 8.33. The root cause is a design/implementation flaw in the AppInStartmenu directive that lets a remote server supply a full UNC path, enabling arb...
CVE-2004-1078
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element...
CVE-2004-1077
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...
CVE-2004-1077: Undefined Security Weakness
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive...
CVE-2004-1078: Undefined Security Weakness
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element...
Citrix MetaFrame Server Detection
Binary data 2809.prm...
CVE-2005-0821
Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext (even if obfuscated in UI), enabling users to view secondary passwords contrary to policy. Documented impact is partial disclosure of credentials. The vulnerability details across sources (NVD/CVE records) specify af...
CVE-2005-0821
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...
CVE-2005-0822: Undefined Security Weakness
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...
CVE-2005-0821: Undefined Security Weakness
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...