PT-2017-5070

Name of the Vulnerable Software and Affected Versions: Apache Xerces-C++ affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a crafted message to an XML service. This crafted message causes hash tabl...

Error: The Citrix Broker Service failed to validate a user's credentials on an XML service

WhenDomain Pass-throughis configured, the following is seen in the event log for the StoreFront: Log Name:Application Source: Citrix Broker Service Date: 2/8/2017 7:31:58 AM Event ID: 2100 Task Category: None Level: Warning Keywords: User: NETWORK SERVICE Computer: VDA name Description: The Citri...

Error: "An Error Occurred While Making The Requested Connection"

When starting XenDesktop from the Web Interface screen, the following error message might be displayed: “An error occurred while making the requested connection” Upon examining the broker logs, the following error message is displayed: “The Citrix Broker Service failed to validate a user's...

Amazon Linux: Security Advisory (ALAS-2012-52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Citrix XenApp XML Service Interface Crafted Packet Parsing Remote Code Execution (CTX135066)

The version of Citrix XenApp installed on the remote Windows host is potentially affected by an unspecified vulnerability in the XML service interface. An unauthenticated, remote attacker can exploit this to execute arbitrary code on the remote host. C Tenable Network Security, Inc...

CVE-2012-5161

The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5161

The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5161

CVE-2012-5161 affects Citrix XenApp 6.5 and 6.5 Feature Pack 1, via the XML Service interface. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the XenApp server by sending a crafted packet to the XML service interface. Exploitation details are not disclos...

CVE-2012-5161: Undefined Security Weakness

The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5161 - Vulnerability in Citrix XenApp could result in arbitrary code execution

Description of Problem A vulnerability has been identified in the XML Service interface of XenApp that could potentially be used by a remote, unauthenticated attacker to execute arbitrary code in the context of a service account on a XenApp server. The vulnerability could potentially be exploited...

Citrix XenApp and XenDesktop XML Service Interface Stack Buffer Overflow

A code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to the improper handling of NFuse RequestValidateCredentials requests. A remote attacker may exploit this vulnerability by sending a malicious packet to the target service. Successful...

Citrix XenApp and XenDesktop XML Service Interface Code Execution

A remote code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to an error in the way the application processes invalid URIs. A remote attacker could exploit this vulnerability by sending a malicious packet to the target service. Successfu...

Citrix XenApp/XenDesktop Multiple Code Execution Vulnerabilities (credentialed check)

The remote Windows host has the Citrix XML Service, a component of Citrix XenApp and XenDesktop, installed. According to its version number, the Citrix XML service installed on the remote host is affected by multiple code execution vulnerabilities when handling specially crafted HTTP POST request...

n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk:...

XenApp / XenDesktop Buffer Overflow

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk:...

XenApp / XenDesktop Heap Corruption

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor...

Citrix XenApp和XenDesktop XML Service interface远程代码执行漏洞

Citrix XenDesktop是Citrix公司一款桌面虚拟化的产品。Citrix XenApp Citrix Presentation Server）应用虚拟化技术实现了快速的应用交付。不需要在用户设备上单独安装或管理应用系统，这样就使应用的测试、部署、管理和支持变得更加简单，系统可以智能地根据用户、应用和位置自动匹配最佳的交付方式。 Citrix XenApp和XenDesktop的XML Service interface在实现上存在漏洞，远程未经认证的攻击者可以利用此漏洞在系统上执行任意代码。 Citrix Presentation Server 4.x Citrix...

Citrix XenApp / XenDesktop XML Service Heap Corruption

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in...

Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer...