NetScaler Web Management 'CVE-2007-6037' XSS Vulnerability - Active Check

The remote Citrix NetScaler web management interface is susceptible to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

NetScaler web management cookie information

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-4676

Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...

Design/Logic Flaw

Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...

CVE-2008-4676

Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...

CVE-2008-4676

Summary: CVE-2008-4676 describes an unspecified local privilege-escalation vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0. The issue is triggered by unknown attack vectors related to cr...

Security Best Practice: Blocking Citrix ICA Vulnerabilities

Independent Computing Architecture ICA is a proprietary protocol for an application server system, designed by Citrix Systems. The protocol lays down a specification for passing data between server and clients. ICA is broadly similar in purpose to window servers such as the X Window System. It al...

Design/Logic Flaw

Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path...

CVE-2008-3485

Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path...

CVE-2008-3485

Technical details about CVE-2008-3485 are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries or vendor advisories.

CVE-2008-3485

Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path...

Citrix Metaframe Privilege escalation

Autorun item path is not fully specified...

Citrix MetaFrame Privilege Escalation

INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ http://www.security.org.br/ ADVISORY/1907 - Citrix MetaFrame Privilege Escalation PRIORITY: Low I - INTRUDERS: ---------------- Intruders Tiger Team Security http://www.intruders.com.br/ is a SecurityLabs...

Citrix Presentation Server 'icabar.exe'本地特权提升漏洞

BUGTRAQ ID: 30446 CNCAN ID：CNCAN-2008073109 Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server icabar.exe文件存在错误，本地攻击者可以利用漏洞提升特权。 icabar.exe文件设计用于启动Citrix MetaFrame管理工具条，允许攻击者在windows 2000或者以下版本的系统中，在默认配置情况下提升特权。在部分环境下的windows 2003也可能利用。...

Cross site scripting

Cross-site scripting XSS vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition Express and Enterprise 4.1.0; and HP integrated Citrix XenServer Select and Enterprise 4.1.0 allows remote attackers to inject...

CVE-2008-3253

Cross-site scripting XSS vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition Express and Enterprise 4.1.0; and HP integrated Citrix XenServer Select and Enterprise 4.1.0 allows remote attackers to inject...

CVE-2008-3253

CVE-2008-3253 describes a cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces of Citrix XenServer family products (Express, Standard, Enterprise 4.1.0; Dell Edition 4.1.0; HP integrated XenServer 4.1.0). The vulnerability allows remote attackers to inject arbitrary web script o...

CVE-2008-3253

Cross-site scripting XSS vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition Express and Enterprise 4.1.0; and HP integrated Citrix XenServer Select and Enterprise 4.1.0 allows remote attackers to inject...

Citrix XenServer XenAPI HTTP接口跨站脚本漏洞

BUGTRAQ ID: 30265 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 XenServer的XenAPI HTTP接口存在跨站脚本漏洞，如果向XenServer发送了特制的URL的话，响应中会包含有未经正确转义的请求URL，导致在用户浏览器中执行客户端脚本。 Citrix XenServer 4.1 Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.citrix.com...

Deterministic Network Extender 'dne2000.sys'本地特权提升漏洞

BUGTRAQ ID: 29772 CNCAN ID：CNCAN-2008061907 Deterministic Network Extender不正确过滤用户提供的数据，可导致本地特权提升。 攻击者可以利用漏洞以SYSTEM级别权限执行任意代码。 Deterministic Network Extender 'dne2000.sys' 2.21.7.233 - 3.21.7.17464版本受此漏洞影响，'dne2000.sys'驱动与如下产品绑定使用： - SafeNet HighAssurance Remote and SoftRemote - Cisco VPN Client -...