Citrix Provisioning Services StreamProcess.exe Remote Code Execution (CTX130846)

The version of the StreamProcess.exe component included with the Citrix Provisioning Services installation running on the remote Windows host is affected by a remote code execution vulnerability in the Ardence.CMessageUtils.fromMgrString function in Manager.dll. An unauthenticated, remote attacke...

Citrix XenApp/XenDesktop Multiple Code Execution Vulnerabilities (credentialed check)

The remote Windows host has the Citrix XML Service, a component of Citrix XenApp and XenDesktop, installed. According to its version number, the Citrix XML service installed on the remote host is affected by multiple code execution vulnerabilities when handling specially crafted HTTP POST request...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Citrix Gateway - ActiveX Control Stack Buffer Overflow (Metasploit)

$Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow

$Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

This module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information ...

Citrix Provisioning Services Opcode 40020010 Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in Citrix Provisioning Service. Citrix Provisioning Service facilitates image management for virtual and physical workloads services, by allowing computers to obtain applications from the network in real-time. The vulnerability is due to...

Citrix EdgeSight Load Tester Buffer Overflow

A stack overflow vulnerability exists in the Citrix EdgeSight Load Tester software installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server as the SYSTEM account. Versions prior to...

Citrix EdgeSight Load Tester (ESLT) version detection

Binary data citrixesltdetect.nbin...

Citrix Provisioning Services Opcode Stack Buffer Overflow

A stack buffer overflow vulnerability exists in Citrix Provisioning Service. The vulnerability is due to an error when handling packet sent to the Provisioning Services server...

n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk:...

Citrix XenApp / XenDesktop security vulnerabilities

Buffer overflow, heap memory corruption...

n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor...

Citrix XenApp / XenDesktop XML Service Heap Corruption

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in...

Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer...