CVE-2002-0301

Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSEUSER and NFUSEPASSWORD parameters...

CVE-2002-0301: Undefined Security Weakness

Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSEUSER and NFUSEPASSWORD parameters...

Citrix Server Detection

Citrix servers allow a Windows user to remotely obtain a graphical login and therefore act as a local user on the remote host. NOTE: by default the Citrix Server application utilizes a weak 40 bit obfuscation algorithm not even a true encryption. If the default settings have not been changed, the...

Citrix Nfuse directory traversal with boilerplate.asp

This vulnerability is based on being an authenticated user as opposed to a prior bug someone put out for an unauthenticated users. Disclaimer: My ability to find a resource at Citrix via their web site was not successful, thus the post here. They have been notified thanks to some contacts forward...

Citrix NFuse 1.511.6 - Cross-Site Scripting

Citrix NFuse 1.511.6 - Cross-Site Scripting...

Citrix NFuse 1.51/1.6 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4372/info Citrix NFuse is an application portal server meant to provide the functionality of any application on the server via a web browser. NFuse works in conjunction with a previously-installed webserver. NFuse is said to support almost any operating...

CVE-2001-1192

Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...

CVE-2001-1192

CVE-2001-1192 affects the Citrix ICA Client for Windows, version 6.1. A remote attacker can exploit the client by hosting a malicious .ICA file that is downloaded and automatically executed, leading to arbitrary code execution on the affected machine. The vulnerability arises in how the ICA clien...

CVE-2001-1192: Undefined Security Weakness

Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...

CVE-2001-0716

CVE-2001-0716 affects Citrix MetaFrame 1.8 Server with Service Pack 3 and Citrix MetaFrame XP/XP SP1. The vulnerability stems from improper handling of multiple sessions during authentication, allowing a remote attacker to cause a crash/DoS by initiating a large number of incomplete sessions. The...

CVE-2001-0760

Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field...

CVE-2001-0716

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

CVE-2001-0760: Undefined Security Weakness

Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field...

CVE-2001-0716: Undefined Security Weakness

Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service crash via a large number of incomplete connections to the server...

CVE-2001-0908

CITRIX Metaframe 1.8 logs the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation NAT...

CVE-2001-0908

Technical details about CVE-2001-0908 are not publicly available in the provided connected documents. The initial description summarizes the issue (Citrix Metaframe 1.8 logs client IP, enabling spoofing) but no specifics on affected versions, exploit, or fixes are provided. Monitor for updates.

CVE-2001-0908: Undefined Security Weakness

CITRIX Metaframe 1.8 logs the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation NAT...

Citrix Nfuse 1.6 - Published Applications Information Leak

Citrix Nfuse 1.6 - Published Applications Information Leak source: https://www.securityfocus.com/bid/3926/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed...

Citrix Nfuse 1.6 - Published Applications Information Leak

source: https://www.securityfocus.com/bid/3926/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed webserver. If a request for 'applist.asp' is submitted...