CVE-2008-6561

Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges...

Information disclosure

Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges...

CVE-2008-6561

Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges...

CVE-2008-6561

CVE-2008-6561 affects the Citrix Presentation Server Client for Windows prior to version 10.200. The issue is that it does not clear credential information from process memory under unspecified circumstances, which could allow local users to gain privileges. The provided documents confirm the aff...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Sql injection

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

CVE-2008-5882

CVE-2008-5882 describes a SQL injection in login.asp of Citrix Application Gateway – Broadcast Server (BCS) before 6.1, used by Avaya AG250 – Broadcast Server before 2.0 and possibly other products. The vulnerability arises via the txtUID parameter and could allow remote execution of arbitrary SQ...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Citrix Broadcast Server login.asp页面SQL注入漏洞

BUGTRAQ ID: 32832 Citrix Broadcast Server是Citrix应用网关中的一个组件，能够以文本、图形和音频信息方式向IP电话交付诸如紧急情况、IT和天气报警等高优先级消息。 Citrix Broadcast Server的管理登录页面存在SQL注入漏洞，远程攻击者可以通过带有txtUID HTTP POST参数的恶意请求来利用这个漏洞非授权访问Web接口或从数据库获得数据。 Citrix Broadcast Server 6.0 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Citrix Broadcast Server SQL injection

login.asp SQL injection...

DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832

Title ----- DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection Severity -------- High Date Discovered --------------- October 14, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability Description...

CVE-2008-5121

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

Design/Logic Flaw

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5121

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5121

CVE-2008-5121 affects dne2000.sys used by Citrix Deterministic Network Enhancer (DNE) versions 2.21.7.233 through 3.21.7.17464, which are deployed with Cisco VPN Client, Blue Coat WinProxy, and SafeNet SoftRemote/HighAssurance Remote. The vulnerability is a local privilege escalation via a crafte...

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

Design/Logic Flaw

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

CVE-2008-5107

CVE-2008-5107 affects Citrix Presentation Server 4.5 and Citrix Desktop Server 1.0. When MSI logging is enabled, the installation process stores database credentials in MSI log files, allowing local users to read them and obtain credentials. Root cause described as the logging process exposing se...

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

KLA10112 OSI vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can obtain information. This vulnerability can be exploited locally at a point related to MSI logging. Original advisories Citrix bulletin Related products Citrix-Presentation-Server CVE li...