CVE-2014-1664: Exposure of Sensitive Information to an Unauthorized Actor

The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file...

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Design/Logic Flaw

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

CVE-2013-6077

The vulnerability CVE-2013-6077 affects Citrix XenDesktop 7.0 when upgraded from XenDesktop 5.x, where policy rule permissions may not be enforced, enabling a remote attacker to bypass intended restrictions. Affected: XenDesktop 7.0 upgrades from 5.x (customers upgrading from 5.6 or earlier to 7....

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

PT-2013-5943

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop version 7.0 Description The issue arises when Citrix XenDesktop 7.0 is upgraded from XenDesktop 5.x, resulting in improper enforcement of policy rule permissions. This allows remote attackers to bypass intended restrictions...

CVE-2013-6077: Undefined Security Weakness

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Citrix XenDesktop Director Detection

Binary data citrixxendesktopdirectordetect.nbin...

Citrix XenDesktop BrokerAccessPolicyRule Policy Rule Remote Security Bypass

The remote host is running a version of Citrix XenDesktop that could be affected by a remote security bypass vulnerability, related to the 'BrokerAccessPolicyRule' policy rule. Note that this vulnerability only affects installations that have been upgraded from XenDesktop 5. Also, Nessus has not...

CVE-2013-6077 - Vulnerability in XenDesktop 7.0 Upgrade Could Result in Policy Bypass

Description of Problem A vulnerability has been identified in Citrix XenDesktop 7.0 that could prevent policy rules from being correctly applied following an upgrade from earlier versions of Citrix XenDesktop. This vulnerability affects deployments of Citrix XenDesktop that have been upgraded fro...

Citrix XenServer Compliance Checks (deprecated)

Binary data citrixxenservercompliancecheck.nbin...

Citrix Netscaler 10.0 Denial Of Service Vulnerability

A vulnerability was found in the nsconfigd daemon TCP port 3008/SSL and 3010. This daemon can be crashed by sending a specially crafted message. No prior authentication is necessary. A watchdog daemon pitboss automatically restarts nsconfigd after the first six crashes and then reboots the...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

Cross site request forgery (csrf)

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

CVE-2013-6011

CVE-2013-6011 affects Citrix NetScaler (ADC) 10.0 prior to 10.0-76.7, where a crafted request can remotely trigger a denial of service by crashing nsconfigd and rebooting the appliance. The NVD and multiple sources consistently describe an unauthenticated remote DoS vector via the nsconfigd daemo...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

CVE-2013-6011: Improper Input Validation

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

PT-2013-5920

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-76.6 Description The issue allows remote attackers to cause a denial of service, resulting in the crash of nsconfigd and subsequent appliance reboot, via a crafted...

Citrix NetScaler DoS

Crash on request processing in nsconfigd TCP/3008, TCP/3010...

SEC Consult SA-20131003-0 :: Denial of service vulnerability in Citrix NetScaler

SEC Consult Vulnerability Lab Security Advisory 20131003-0 ======================================================================= title: nsconfigd NSRPCREMOTECMD Denial of service vulnerability product: Citrix NetScaler vulnerable version: NetScaler 10.0 Build 76.7 fixed version: NetScaler 10.0...