KLA10116 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix XenApp & XenDesktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed web site. Original advisories - Related products Citrix-XenApp CVE list...

Nmap NSE net: citrix-brute-xml

Attempts to guess valid credentials for the Citrix PN Web Agent XML Service. The XML service authenticates against the local Windows server or the Active Directory. This script makes no attempt of preventing account lockout. If the password list contains more passwords than the lockout-threshold...

Nmap NSE net: citrix-enum-servers-xml

Extracts the name of the server farm and member servers from Citrix XML service. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumserversxmlnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script:...

Nmap NSE net: citrix-enum-servers

Extracts a list of Citrix servers from the ICA Browser service. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumserversnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security...

Nmap NSE net: citrix-enum-apps

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: citrix-enum-servers

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: citrix-brute-xml

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: citrix-enum-apps-xml

Extracts a list of applications, ACLs, and settings from the Citrix XML service. The script returns more output with higher verbosity. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumappsxmlnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson...

Nmap NSE net: citrix-enum-servers-xml

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: citrix-enum-apps-xml

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Citrix Provisioning Services streamprocess.exe Stack Buffer Overflow

Citrix Provisioning Service allows computers to obtain application from the network in real-time. Administrators can prepare a master device for imaging purposes by creating a vDisk image that would be stored on a Provisioning Server. Then, this vDisk would be used by devices to boot directly fro...

Citrix XenServer多个不明细节拒绝服务漏洞

BUGTRAQ ID: 47802 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer在实现上存在多个不明细节的拒绝服务漏洞，客户端虚拟机中的恶意本地用户可利用此漏洞造成拒绝服务。 Citrix XenServer 5.6 Citrix XenServer 5.5 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.citrix.com...

Citrix XenServer凭证本地信息泄露漏洞

BUGTRAQ ID: 47804 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer在实现上存在凭证本地信息泄露漏洞，客户端虚拟机中的恶意本地用户可利用此漏洞造成拒绝服务；恶意本地用户可利用此漏洞泄露敏感信息。 1）不明细节错误可被利用中断管理程序的常规操作。成功利用此漏洞需要客户端操作系统上的管理权限； 2）由于存储媒体凭证的不安全记录导致的安全问题可被本地用户利用泄露凭证信息； Citrix XenServer 5.6 厂商补丁： Citrix ------...

UDP Service Sweeper

Detect interesting UDP services This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'UDP Service Sweeper', 'Description' = 'Detect interesting UDP services', 'Author' = 'hdm',...

OpenStack 'floating Linux kernel' rides VMware hypervisor !

OpenStack 'floating Linux kernel' rides VMware hypervisor ! OpenStack – the open source "infrastructure cloud" project founded by Rackspace and NASA – has released a third version of its platform, offering support for all major hypervisors. With the new release, codenamed "Cactus", developers hav...

Citrix License Server Version Detection

This script finds the installed Citrix License Server version. The script logs in via smb, searches for Citrix in the registry and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbcitrixlicensingadminconsolemultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Citrix Licensing Administration Console Security...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

Citrix Licensing Administration Console is prone to security bypass and denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Citrix Secure Gateway Unspecified Remote Code Execution

The version of Citrix Secure Gateway running on the remote host has an unspecified code execution vulnerability. This could reportedly allow a remote attacker to execute arbitrary code in the context of the Secure Gateway process. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Citrix Secure Gateway Unspecified DoS

The version of Citrix Secure Gateway running on the remote host has an unspecified denial of service vulnerability. Making a specially crafted request can result in 100% CPU utilization, causing the application to become unresponsive. A remote attacker could exploit this by sending a malicious...