CVE-2018-0099: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of GUI command arguments. An attacker could exploit this...

Cisco D9800 Network Transport Receiver OS Command Injection Vulnerability

A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of GUI command arguments. An attacker could exploit this...

PT-2018-4007 · D Link · D-Link Dir-868L +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L versions prior to DIR860LA1 FW110b04 D-Link DIR-865L versions prior to DIR-865L REVA FIRMWARE PATCH 1.08.B01 D-Link DIR-868L versions prior to DIR868LA1 FW112b04 Description: The issue is related to improper input validation i...

How to get the traces for Citrix Receiver for Windows (Store) 4.10

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to get traces for Citrix Receiver for Windows Store 4.10 edition...

[OST]French Canadian Keyboard not mapping properly to VDA from Mac

French Canadian special accent characters not displaying correctly when accessing a Windows 7 VDA from a Macclient device with Receiver for OSX 12.4. On a Mac with a French Canadian keyboard, the circumflex character ^ is not mapped as expected with Receiver Macversion 12 connecting to a Windows ...

Enlightened Data Transport Not working with Double Hop DMZ scenario

EDT requires policy on the XenDesktop to be enabled and DTLS on the NetScaler to be ON. Also, StoreFront needs to be minimum Version 3.8 and Citrix Receiver at 14.7. So all the requirements are met. At theXenDesktop Policy for "HDX Adaptive Transport" is set to "preferred", still connections fail...

Receiver 4.10: Grey Screen On Published Desktops After Upgrading To Receiver 4.10

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information After upgrading Receiver from 4.9 to 4.10, some clients cannot access published desktops and apps. On...

Connection failures due to SSL certificate errors with Citrix Workspace app for Chrome / Citrix Receiver for Chrome

Connection to StoreFront/VDA will fail and may show cannot connect to server error or some SSL Certificate error in console logs. One of the reason could be invalid SSL certificate. Applicable Products: Citrix Receiver for HTML5, Citrix Receiver for Chrome, Citrix Workspace app for Chrome, Citrix...

DEBIAN-CVE-2017-17433

The recvfiles function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a filename in the daemonfilterlist data structure, which allows remote attackers to bypass intended access restrictions...

EDT Session Connection/Reconnection Attempts using UDP and TCP in Parallel

Enhancement to existing EDT feature Starting with 2017 Q4 EDT-compatible versions of Receiver check “Requirements for this feature” section, session connections will be attempted using EDT and TCP in parallel. This will occur during: Initial connection Session roaming from one Receiver device to...

EDT Security using DTLS

EDT Security using DTLS As from XenApp and XenDesktop 7.16 VDAs, DTLS is supported refer to the Windows OS VDA 7.16 Schannel library support for DTLS article. This means that backend connection between NetScaler and the VDA could optionally use DTLS. In addition, Receiver could optionally use DTL...

StoreFront 3.7 - Chrome Does Not Detect Receiver on Client

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. While launching applications from Chrome, it uses HTML Receiver instead of Locally installed Receive...

rsync access restriction bypass vulnerability

rsync is a data mirroring backup application for Unix-like systems developed by Australian software developers Andrew Tridgell and Paul Mackerras that synchronizes file and directory updates between two computers and uses differential encoding to reduce data transfers. A security vulnerability...

How to Detect Citrix Receiver for Windows Edition (Store or Manual Install)?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to detect Citrix Receiver for Windows edition installed on the end point...

CVE-2017-10890

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on th...

Bitwarden: Vulnerable exported broadcast receiver

Good evening, This is actually in your code base this time. : Since the following broadcast receiver has export=true it can be exploited by 3rd parties. Vulnerability com.x8bit.bitwarden.PackageReplacedReceiver has exported set to true making the receiver vulnerable to tampering. F238236 POC I wa...

Workspace Control - Connect and Disconnect button in Receiver for Web are not visible

Consider the following scenario. You have enabled Workspace Control for Receiver for Webin your Xen Desktop environment. Additionally, you have enabled the setting to display Reconnect/Disconnect button for Receiver for Web asshown in the screenshot below: However, when user logs on toReceiver fo...

Various Connection Method Behaviours of Mobile Citrix Receiver with StoreFront and NetScaler Gateway

The following scenarios provide an understanding of when to use the StoreFront server FQDN and/or NetScaler Gateway FQDN in an App Controller solution when connecting from a mobile device: Internal Users Connecting to StoreFront Server Scenario 1 – Legacy PNA Site and No Store Available Scenario ...

RHEL 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:2809)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2809 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

Generic USB Redirection after installing Citrix Receiver 12.7 for Mac on macOS High Sierra

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. New users after installing Citrix Receiver 12.7 or above for Mac on macOS High Sierra when launching...