Citrix Presentation Server 4.5 Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple code execution vulnerabilities. By sending a specially crafted packet to the IMA server process, a remote, unauthenticated attacker could execute arbitrary code subject to the...

Immunity Canvas: CITRIX_METAFRAME

Name| citrixmetaframe ---|--- CVE| CVE-2008-0356 Exploit Pack| CANVAS Description| Citrix IMA Heap Overflow Demo Notes| CVSS: 10.0 Repeatability: This is a one shot exploit. VENDOR: Citrix CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0356 CVE Name: CVE-2008-0356...

DSquare Exploit Pack: D2SEC_IMASRV

Name| d2secimasrv ---|--- CVE| CVE-2008-0356 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server 4.0 IMA Service Heap Overflow Notes|...

CVE-2008-0356

CVE-2008-0356 describes a heap-based buffer overflow in Citrix Presentation Server’s Independent Management Architecture (IMA) service (ImaSrv.exe). By sending crafted packets to the IMA ports 2512/2513, an unauthenticated remote attacker could overflow a heap buffer and execute arbitrary code wi...