DSquare Exploit Pack: D2SEC_IMASRV

Name| d2secimasrv ---|--- CVE| CVE-2008-0356 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server 4.0 IMA Service Heap Overflow Notes|...

CVE-2008-0356

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

CVE-2008-0356

CVE-2008-0356 describes a heap-based buffer overflow in Citrix Presentation Server’s Independent Management Architecture (IMA) service (ImaSrv.exe). By sending crafted packets to the IMA ports 2512/2513, an unauthenticated remote attacker could overflow a heap buffer and execute arbitrary code wi...

CVE-2008-0356

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

CVE-2008-0356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Independent Management Architecture IMA service in Citrix Presentation Server MetaFrame Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to...

Citrix Metaframe Presentation Server IMA Service Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Independent Management Architecture service, ImaSrv.exe, which listens by default...

CVE-2002-2426: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the...

CVE-2002-2426

Cross-site request forgery CSRF vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the...

CVE-2002-2426

The CVE-2002-2426 entry describes a CSRF vulnerability in Citrix Presentation Server 4.0/4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0–2.0. The issue arises from the InitialProgram key in an ICA connection, allowing remote attackers to run published applications (and possibly ...

Citrix Presentation Server远程未授权代码执行漏洞

Citrix Presentation Server是一款集中部署应用和提供按需接入的解决方案。 Citrix Presentation Server存在一个设计问题，远程攻击者可以利用漏洞以授权用户上下文执行任意未授权代码。 如果授权用户被诱使调用ICA连接到Citrix Presentation Server，它可能被攻击者利用并以授权用户上下文执行未授权代码。 ICA连接可通过起用.ica文件或使用ICA客户端插件来调用，因此攻击者构建恶意的.ICA文件，诱使用户打开，可导致任意代码未授权执行。 测试方法 Citrix Presentation Server 4.0 Citrix...

Citrix Presentation Server客户端内容重新定向拒绝服务漏洞

BUGTRAQ ID: 24790 Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server客户端的程序邻居代理（Program Neighborhood Agent）中存在错误，如果用户使用内容重新定向试图访问客户端网络中有大于200字符超长路径的文件的话，就可能导致代理崩溃。 Citrix Presentation Server Client 10.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.citrix.com...

Citrix Presentation Server Clients Program Neighborhood Agent (PNAgent) Content Redirection Remote DoS

Citrix Presentation Server Client is installed on the remote host. It is used to access published resources such as applications stored on servers running Citrix Presentation Server. The Program Neighborhood Agent component of the version of Citrix Presentation Server Client on the remote host ma...

Design/Logic Flaw

The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service agent exit via a certain request that uses content redirection and a long pathname...

CVE-2007-3625

The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service agent exit via a certain request that uses content redirection and a long pathname...

CVE-2007-3625

The vulnerability CVE-2007-3625 concerns the Program Neighborhood Agent (PNAgent) component of Citrix Presentation Server Client on 32-bit Windows. A crafted content-redirection request with a long pathname can cause the PNAgent to exit, resulting in a denial-of-service condition. Affected are Ci...

CVE-2007-3625

The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service agent exit via a certain request that uses content redirection and a long pathname...

CVE-2007-3625: Undefined Security Weakness

The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a denial of service agent exit via a certain request that uses content redirection and a long pathname...

CVE-2007-2850

The CVE-2007-2850 vulnerability affects Citrix Session Reliability Service (XTE) in MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0/1.5. The issue allows remote attackers to bypass network security policies and connect to arbitrary TCP ports by sending a modi...

Citrix Presentation Server client code execution

Code exectuion if proxy server is used...

Code injection

Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers...