5444 matches found
USN-1719-1: Linux kernel (Oneiric backport) vulnerabilities
It was discovered that hypervkvpd, which is distributed in the Linux kernel, was not correctly validating the origin on Netlink messages. An untrusted local user can cause a denial of service of Linux guests in Hyper-V virtualization environments. CVE-2012-2669 Dmitry Monakhov reported a race...
Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens for UDP traffic on multiple...
CVE-2012-5616
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform formerly Citrix CloudStack before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain 1 the SSH private key as recorded by the createSSHKeyPair API, 2 the password of an added host as recorde...
Design/Logic Flaw
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform formerly Citrix CloudStack before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain 1 the SSH private key as recorded by the createSSHKeyPair API, 2 the password of an added host as recorde...
CVE-2012-5616
Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform formerly Citrix CloudStack before 3.0.6 stores sensitive information in the log4j.conf log file, which allows local users to obtain 1 the SSH private key as recorded by the createSSHKeyPair API, 2 the password of an added host as recorde...
CVE-2012-5616
CVE-2012-5616 affects Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform prior to 3.0.6, where sensitive data is logged in log4j.conf. This enables local users to obtain (1) SSH private keys from createSSHKeyPair, (2) host passwords from AddHost, and (3)/(4) VM passwords from DeployVM or...
Citrix XenApp XML Service Interface Crafted Packet Parsing Remote Code Execution (CTX135066)
The version of Citrix XenApp installed on the remote Windows host is potentially affected by an unspecified vulnerability in the XML service interface. An unauthenticated, remote attacker can exploit this to execute arbitrary code on the remote host. C Tenable Network Security, Inc...
CVE-2012-6314
Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...
CVE-2012-5161
The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...
Command injection
Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...
Code injection
The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-5161
The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-5161
CVE-2012-5161 affects Citrix XenApp 6.5 and 6.5 Feature Pack 1, via the XML Service interface. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the XenApp server by sending a crafted packet to the XML service interface. Exploitation details are not disclos...
CVE-2012-6314
Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...
CVE-2012-6314
CVE-2012-6314 affects Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x prior to 5.6.200. The issue is that server‑side USB redirection policy changes are not propagated to the VDA, allowing authenticated users to retain access to USB devices even after policy disables USB redirection. The vuln...
PT-2012-5810 · Citrix · Citrix Xenapp
Name of the Vulnerable Software and Affected Versions: Citrix XenApp versions 6.5 and 6.5 Feature Pack 1 Description: The issue allows remote attackers to execute arbitrary code via unspecified vectors in the XML Service interface. Recommendations: For Citrix XenApp versions 6.5 and 6.5 Feature...
Citrix XenDesktop Virtual Desktop Agent USB Redirection Propagation Handling Access Restriction Bypass (CTX135813)
The version of Citrix XenDesktop Virtual Desktop Agent contains a flaw in the server-side USB redirection policy. This could allow an authenticated user to gain access to their USB devices when the server-side policy has been modified to disable USB redirection. C Tenable Network Security, Inc...
CVE-2012-5161 - Vulnerability in Citrix XenApp could result in arbitrary code execution
Description of Problem A vulnerability has been identified in the XML Service interface of XenApp that could potentially be used by a remote, unauthenticated attacker to execute arbitrary code in the context of a service account on a XenApp server. The vulnerability could potentially be exploited...
SEC Consult SA-20121203-0 :: F5 FirePass SSL VPN Unauthenticated local file inclusion
SEC Consult Vulnerability Lab Security Advisory 20121203-0 ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7 impact: Critical homepage:...
