CVE-2007-0108

nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles...

Novell Client NWGINA.DLL User档案文件安全绕过漏洞

Novell Client是一款Novell系统客户端。 Novell Client存在安全绕过问题，远程攻击者可以利用漏洞在Citrix环境中调用其他用户的档案文件，导致提权等攻击。 目前没有详细漏洞细节提供。 Novell Client 4.91 SP3 可联系供应商获得解决方案： http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm...

CVE-2007-0108

The CVE-2007-0108 issue affects nwgina.dll in Novell Client 4.91 SP3 for Windows (2000/XP/2003). It does not delete user profiles during Terminal Service or Citrix sessions, enabling a remote authenticated user to invoke alternate user profiles. The description does not specify additional technic...

[SA23619] Novell Client User Profile Restriction Bypass

TITLE: Novell Client User Profile Restriction Bypass SECUNIA ADVISORY ID: SA23619 VERIFY ADVISORY: http://secunia.com/advisories/23619/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Novell Client for Windows NT/2000/XP 4.x http://secunia.com/product/1516/...

Novell Client TS/Citrix Session Arbitrary User Profile Invocation

The file 'nwgina.dll' included with the Novell Client software reportedly fails to delete user profiles when in a Terminal Server / Citrix session. A local user may be able to leverage this issue to invoke other user profiles on the affected host. C Tenable Network Security, Inc...

Citrix ICA Client ActiveX control buffer overflow

Overview A vulnerability in an ActiveX control provided with the Citrix Presentation Server Client could allow a remote attacker to execute arbitrary code on an affected system. Description The Citrix Presentation Server Client software provides an ActiveX control that can be used to integrate th...

CVE-2006-6573

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control AAC 4.2, when deployed on the Access Gateway appliance 4.2 through 4.2.2 allows remote authenticated users to "gain access to data" and obtain sensitive information via unspecified vector...

CVE-2006-6572

Unspecified vulnerability in Citrix Advanced Access Control AAC Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a differen...

CVE-2006-6573

The vulnerability CVE-2006-6573 affects Citrix Access Gateway: 4.5 Advanced Edition and 4.2 with Advanced Access Control 4.2 on Access Gateway appliances 4.2–4.2.2. A remote, authenticated user can gain access to data via unspecified vectors, causing information disclosure. Citrix notes updates a...

CVE-2006-6572

Citrix Access Gateway AAC 4.2 with LDAP enabled is affected by an LDAP authentication bypass vulnerability. A remote attacker may authenticate without valid credentials. Citrix provides a hotfix (CTX110950) and recommends not enabling LDAP authentication as mitigation.

CVE-2006-6572

Unspecified vulnerability in Citrix Advanced Access Control AAC Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a differen...

CVE-2006-6573

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control AAC 4.2, when deployed on the Access Gateway appliance 4.2 through 4.2.2 allows remote authenticated users to "gain access to data" and obtain sensitive information via unspecified vector...

CVE-2006-6334

Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer...

DSquare Exploit Pack: D2SEC_WFICA

Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...

CVE-2006-6334

Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer...

CVE-2006-6334

CVE-2006-6334 is a heap-based buffer overflow in the SendChannelData function of wfica.ocx, part of the Citrix Presentation Server Client for Windows, affected up to version 9.230. An attacker-controlled DataSize that is smaller than the Data buffer length can allow remote code execution when a u...

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-15.html December 6, 2006 -- CVE ID: CVE-2006-6334 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server Client for Windows v9.230 --...

Citrix Presentation Server client for Windows buffer overflow

Buffer overflow in Wfica.ocx ActiveX SendChannelData function...

Citrix Presentation Server Client 9.200 - WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability

Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability. CVE-2006-6334. Remote exploit for windows platform source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because...

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow // source: https://www.securityfocus.com/bid/21220/info Novell Client is prone to a remote buffer-overflow vulnerability. Successful exploits may result in a denial-of-service condition or arbitrary code execution. Remote, anonymous attacker...