CVE-2014-1664

The CVE-2014-1664 entry concerns Citrix GoToMeeting for Android version 5.0.799.1238, which logs HTTP requests containing sensitive data. The underlying issue is information disclosure via logs read by other Android apps with system log access, enabling leakage of user IDs, meeting details, and a...

GoToMeeting Information Disclosure

ADVISORY INFORMATION ======================== Title: GoToMeeting Information Disclosure via Logging Output Android CVE: CVE-2014-1664 CVE Information: ASSIGNED Date published: PUBLIC Date of last update: 01/23/2014 Vendor Contacted: Citrix Release mode: Coordinated Release 2. VULNERABILITY...

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Design/Logic Flaw

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

CVE-2013-6077

The vulnerability CVE-2013-6077 affects Citrix XenDesktop 7.0 when upgraded from XenDesktop 5.x, where policy rule permissions may not be enforced, enabling a remote attacker to bypass intended restrictions. Affected: XenDesktop 7.0 upgrades from 5.x (customers upgrading from 5.6 or earlier to 7....

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Citrix XenDesktop BrokerAccessPolicyRule Policy Rule Remote Security Bypass

The remote host is running a version of Citrix XenDesktop that could be affected by a remote security bypass vulnerability, related to the 'BrokerAccessPolicyRule' policy rule. Note that this vulnerability only affects installations that have been upgraded from XenDesktop 5. Also, Nessus has not...

Citrix XenDesktop Director Detection

Binary data citrixxendesktopdirectordetect.nbin...

CVE-2013-6077 - Vulnerability in XenDesktop 7.0 Upgrade Could Result in Policy Bypass

Description of Problem A vulnerability has been identified in Citrix XenDesktop 7.0 that could prevent policy rules from being correctly applied following an upgrade from earlier versions of Citrix XenDesktop. This vulnerability affects deployments of Citrix XenDesktop that have been upgraded fro...

Citrix XenServer Compliance Checks (deprecated)

Binary data citrixxenservercompliancecheck.nbin...

Citrix Netscaler 10.0 Denial Of Service Vulnerability

A vulnerability was found in the nsconfigd daemon TCP port 3008/SSL and 3010. This daemon can be crashed by sending a specially crafted message. No prior authentication is necessary. A watchdog daemon pitboss automatically restarts nsconfigd after the first six crashes and then reboots the...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

Cross site request forgery (csrf)

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

CVE-2013-6011

CVE-2013-6011 affects Citrix NetScaler (ADC) 10.0 prior to 10.0-76.7, where a crafted request can remotely trigger a denial of service by crashing nsconfigd and rebooting the appliance. The NVD and multiple sources consistently describe an unauthenticated remote DoS vector via the nsconfigd daemo...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

SEC Consult SA-20131003-0 :: Denial of service vulnerability in Citrix NetScaler

SEC Consult Vulnerability Lab Security Advisory 20131003-0 ======================================================================= title: nsconfigd NSRPCREMOTECMD Denial of service vulnerability product: Citrix NetScaler vulnerable version: NetScaler 10.0 Build 76.7 fixed version: NetScaler 10.0...

Citrix NetScaler DoS

Crash on request processing in nsconfigd TCP/3008, TCP/3010...

CVE-2013-2601

The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection...

CVE-2013-2933

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2937

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, related to debugging messages, a different vulnerability than other CVEs listed in CTX137162...