5444 matches found
Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens for UDP traffic on multiple...
Citrix Access Gateway Plug-in ActiveX Code Execution (CVE-2011-2882)
Citrix Access Gateway is an enhanced SSL VPN system which not only provides VPN access, but also enables application level access control. The system is available as standalone software, a physical appliance or a virtual machine. It is designed to work with Citrix XenApp and XenDesktop to allow...
Citrix Receiver, XenDesktop "Pass-the-hash" Attack
Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...
Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash
Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...
Citrix XenApp and XenDesktop XML Service Interface Code Execution
A remote code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to an error in the way the application processes invalid URIs. A remote attacker could exploit this vulnerability by sending a malicious packet to the target service. Successfu...
Citrix XenApp and XenDesktop XML Service Interface Stack Buffer Overflow
A code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to the improper handling of NFuse RequestValidateCredentials requests. A remote attacker may exploit this vulnerability by sending a malicious packet to the target service. Successful...
UDP Service Prober
Detect common UDP services using sequential probes This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'UDP Service Prober', 'Description' = 'Detect common UDP services using...
PT-2011-34: HTTP Response Splitting in Citrix XenServer Web Self Service
The specialists of the Positive Research center have detected "HTTP Response Splitting" vulnerability in Citrix XenServer Web Self Service. GET parameter page of the login page allows one to insert an arbitrary HTTP header into the server response. How to fix Update your software up to the latest...
PT-2011-36: Insufficient authorization in Citrix XenServer Virtual Switch Controller
Positive Research Center has discovered an insufficient authorization in Citrix XenServer Virtual Switch Controller. Low privileged Read-Only users can change certain configuration parameters e.g. hostname and domain. Configuration snapshots that contain the entire system configuration including...
PT-2011-33: URL redirector abuse in Citrix XenServer Web Self Service
The specialists of the Positive Research center have detected "URL redirector abuse" vulnerability in Citrix XenServer Web Self Service. URL redirector GET parameter page of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix...
PT-2011-39: Denial of Service in Citrix XenServer Workload Balancer
Positive Research Center has discovered a Denial of Service vulnerability in Citrix XenServer Workload Balancer. Remote attackers can cause an unhandled exception in the DwmWebSvc component by sending a specially crafted HTTP request. How to fix Update your software up to the latest version...
PT-2011-32: Cross-site scripting in Citrix XenServer Web Self Service
The specialists of the Positive Research center have detected "Cross-site scripting" vulnerability in Citrix XenServer Web Self Service. Since special characters in usernames are not properly escaped a stored XSS attack is possible. How to fix Update your software up to the latest version Advisor...
PT-2011-35: Multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller
Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix XenServer Virtual Switch Controller. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...
PT-2011-40: Multiple CSRF vulnerabilities in Citrix License Administration Console
Positive Research Center has discovered a multiple CSRF vulnerabilities in Citrix License Administration Console. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your software up to the latest...
PT-2011-37: HTTP Response Splitting in Citrix XenServer Virtual Switch Controller
Positive Research Center has discovered a HTTP Response Splitting in Citrix XenServer Virtual Switch Controller. GET parameter lastpage of the login page allows one to insert an arbitrary HTTP header into the server response. How to fix Update your software up to the latest version Advisory statu...
PT-2011-38: URL redirector abuse in Citrix XenServer Virtual Switch Controller
Positive Research Center has discovered an URL redirector abuse in Citrix XenServer Virtual Switch Controller. URL redirector GET parameter lastpage of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix Update your software up...
PT-2011-31: Multiple Cross-Site Request Forgery vulnerabilities in Citrix XenServer Web Self Service
The specialists of the Positive Research center have detected "Cross-Site Request Forgery" vulnerabilities in Citrix XenServer Web Self Service. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your...
PT-2011-41: Stored XSS vulnerability in Citrix License Administration Console
Positive Research Center has discovered a Stored XSS vulnerability in Citrix License Administration Console. Since special characters in usernames are not properly escaped, a stored XSS attack is possible. How to fix Update your software up to the latest version Advisory status 10.11.2011 - Vendo...
KLA10113 ACE vulnerability in Citrix Program Neighborhood
An unspecified vulnerability was found in the Citrix Program Neighborhood. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed associated file. Original advisories Citrix bulletin Related products...
