August 16, 2017—KB4034661 (OS Build 14393.1613)

None None...

The vulnerability of the gpkcsp.dll component in Windows operating systems’ Smart Card authentication code allows a perpetrator to execute arbitrary code.

The vulnerability of the gpkcsp.dll component in Windows operating systems for smart card authentication is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely assuming the computer is in a domain and remote administration is allow...

Buffer overflow

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

CVE-2017-0176

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

CVE-2017-0176

A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol...

Microsoft Windows RDP Remote Code Execution Vulnerability (KB4022747)

This host is missing a critical security update according to Microsoft KB4022747 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Security Advisory 4025685: Guidance for older platforms (XP / 2003) (EXPLODINGCAN)

The remote Windows host is missing a security update. It is, therefore, affected by one or more of the following vulnerabilities : - A remote code execution vulnerability exists in how the Remote Desktop Protocol RDP handles requests if the RDP server has Smart Card authentication enabled. An...

Microsoft Windows EsteemAudit RDP Remote Code Execution (CVE-2017-0176; CVE-2017-9073)

A remote code execution vulnerability exist in Microsoft Remote Desktop Protocol RDP. The vulnerability is due to the Windows Smart Card logon mechanism allowing a buffer overflow. The Fuzzbunch tool allows attackers to execute this exploit. An attacker who successfully exploits this vulnerabilit...

Citrix Receiver: Difference of Logon Experience When Logon StoreFront with a Locked Account by Using Username/password and Smart Card

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes user experience of using Pass-throughwith username and password or smart card log...

March 14, 2017—KB4012606 (OS Build 10240.17319)

None None...

PCSC-Lite: Multiple vulnerabilities

Background PCSC-Lite is a middleware to access a smart card using the SCard API PC/SC. Description The SCardReleaseContext function normally releases resources associated with the given handle including “cardsList” and clients should cease using this handle. However, a malicious client can make t...

USN-3176-1: PCSC-Lite vulnerability

Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges...

USN-3176-1 pcsc-lite vulnerability

Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges...

January 10, 2017—KB3213986 (OS Build 14393.693)

None None...

January 10, 2017—KB3213986 (OS Build 14393.693)

None None...

[SECURITY] Fedora 25 Update: pcsc-lite-1.8.20-1.fc25

The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...

NetsCaler: Smart Card Authentication with EULA using nfactor

We need to do Smart Card Authentication on the NetScaler virtual server NetScaler Gateway or Load balancing and also we need the users to accept the End User License Agreement EULA before they could access the backend resource...

"Attach a smart card reader and insert your smart card to log on" When no Smart Card Authentication Present

When using Citrix Receiver to connect to the NetScaler Gateway, StoreFront users get "Attach a smart card reader and insert your smart card to log on" however smart authentication is not configured...

SAML logons fail on replicated Storefront Server

SAML enabled logons via Storefront configured and working on one SF3.0 server. When trying to setup a second one and after joining it to the server group we get "cannot log on using smart card". If we uninstall SF from that server and reinstall and configure it manually do not add it to the serve...

Getting "Request not supported" while launching a published Desktop with FAS enabled

Launching of a published desktop fails when StoreFront server is configured to use FAS. You will get an error "Request Not Supported ". The below error may be seen in Kerberos event logs on the VDA when attempting to launch. 0x10 - KDCERRPADATATYPENOSUPP: KDC has no support for padata type Kerber...