Citrix Provisioning Services streamprocess.exe Stack Buffer Overflow

Citrix Provisioning Service allows computers to obtain application from the network in real-time. Administrators can prepare a master device for imaging purposes by creating a vDisk image that would be stored on a Provisioning Server. Then, this vDisk would be used by devices to boot directly fro...

Citrix XenServer多个不明细节拒绝服务漏洞

BUGTRAQ ID: 47802 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer在实现上存在多个不明细节的拒绝服务漏洞，客户端虚拟机中的恶意本地用户可利用此漏洞造成拒绝服务。 Citrix XenServer 5.6 Citrix XenServer 5.5 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.citrix.com...

Citrix XenServer凭证本地信息泄露漏洞

BUGTRAQ ID: 47804 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer在实现上存在凭证本地信息泄露漏洞，客户端虚拟机中的恶意本地用户可利用此漏洞造成拒绝服务；恶意本地用户可利用此漏洞泄露敏感信息。 1）不明细节错误可被利用中断管理程序的常规操作。成功利用此漏洞需要客户端操作系统上的管理权限； 2）由于存储媒体凭证的不安全记录导致的安全问题可被本地用户利用泄露凭证信息； Citrix XenServer 5.6 厂商补丁： Citrix ------...

UDP Service Sweeper

Detect interesting UDP services This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'UDP Service Sweeper', 'Description' = 'Detect interesting UDP services', 'Author' = 'hdm',...

OpenStack 'floating Linux kernel' rides VMware hypervisor !

OpenStack 'floating Linux kernel' rides VMware hypervisor ! OpenStack – the open source "infrastructure cloud" project founded by Rackspace and NASA – has released a third version of its platform, offering support for all major hypervisors. With the new release, codenamed "Cactus", developers hav...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

Citrix Licensing Administration Console is prone to security bypass and denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbcitrixlicensingadminconsolemultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Citrix Licensing Administration Console Security...

Citrix License Server Version Detection

This script finds the installed Citrix License Server version. The script logs in via smb, searches for Citrix in the registry and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Citrix Secure Gateway Unspecified Remote Code Execution

The version of Citrix Secure Gateway running on the remote host has an unspecified code execution vulnerability. This could reportedly allow a remote attacker to execute arbitrary code in the context of the Secure Gateway process. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Citrix Access Gateway Command Execution

$Id: citrixaccessgatewayexec.rb 11873 2011-03-03 20:51:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Citrix Secure Gateway Installed

Citrix Secure Gateway is installed on the remote host. This application provides a secure gateway between Citrix XenApp and client devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52545; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Citrix Secure Gateway Unspecified DoS

The version of Citrix Secure Gateway running on the remote host has an unspecified denial of service vulnerability. Making a specially crafted request can result in 100% CPU utilization, causing the application to become unresponsive. A remote attacker could exploit this by sending a malicious...

Citrix Access Gateway - Command Execution (Metasploit)

$Id: citrixaccessgatewayexec.rb 11873 2011-03-03 20:51:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2011-1101

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

CVE-2011-1101

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

CVE-2011-1101

CVE-2011-1101 concerns Citrix Licensing Administration Console 11.6 with multiple vulnerabilities in a third‑party component, enabling remote attackers to access unauthorized license administration functionality or cause a denial of service via unknown vectors (NVD entry, CVSSv2 base 6.8). OpenVA...

PT-2011-2866

Name of the Vulnerable Software and Affected Versions Citrix Licensing Administration Console version 11.6 Description The issue concerns multiple unspecified vulnerabilities in a third-party component. These vulnerabilities allow remote attackers to access unauthorized license administration...

CVE-2011-1101: Undefined Security Weakness

Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to 1 access unauthorized "license administration functionality" or 2 cause a denial of service via unknown vectors...

Citrix Provisioning Services streamprocess.exe Stack Overflow

Added: 02/24/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...