Citrix MetaFrame密码管理信息泄露漏洞

Citrix MetaFrame是流行的强大的应用服务器及应用入口软件解决方案。 Citrix MetaFrame密码管理程序存在设计错误，本地攻击者可以利用漏洞绕过策略查看密码信息。 Citrix MetaFrame密码管理程序允许管理员控制用户可查看属于他们的第二密码，版本2.5及之前版本允许用户即使管理员设置了禁止查看的情况下也能查看第二密码信息。 当查看配置的应用程序密码字段以星号方式显示给用户，可导致用户使用密码查看工具获得此字段的明文密码信息。 Citrix MetaFrame Password Manager 2.5 Citrix MetaFrame Password...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC

No description provided by source...

Multiple Printer Providers (spooler service) Privilege Escalation Exploit

No description provided by source. /Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acu [email protected] Website: http://www.514.es This code should allow to gain SYSTEM...

SSC DiskAccess NFS Client - 'DAPCNFSD.dll' Remote Stack Buffer Overflow

// source: https://www.securityfocus.com/bid/22301/info Shaffer Solutions Corp DiskAccess is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

Multiple Printer Providers Spooler Service - Local Privilege Escalation /Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website:...

Multiple Printer Providers (spooler service) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================= Multiple Printer Providers spooler service Privilege Escalation Exploit ========================================================================= /Private exploit-...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...

Citrix Presentation/MetaFrame Server cpprov.dll畸形参数栈缓冲区溢出漏洞

Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的打印提供程序（ccprov.dll）在处理传送给EnumPrintersW和OpenPrinter函数的参数时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者能够通过本地API调用或RPC请求向OpenPrinter传送超过130字节的超长字符串做为其第一个参数的话，就可以触发这个溢出，导致在本地系统环境中执行任意代码。 Citrix MetaFrame XP 1.0 Citrix Presentation Server...

Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================================= Citrix Metaframe Presentation Server Print Provider Buffer Overflow PoC ======================================================================= / Proof of concept exploit for...

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow (PoC)

Citrix Metaframe Presentation Server Print Provider - Buffer Overflow PoC / Proof of concept exploit for ZDI - Citrix Metaframe spooler service vulnerability Microsoft Windows - EnumPrinter & EnumPrinterW Fuzzer v0.1 Author: Andres Tarasco Acuña - [email protected] url: http://www.514.es This is an...

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability

ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-006.html January 24, 2007 -- CVE ID: CVE-2007-0444 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server 4.0 Citrix MetaFrame...

Citrix Metaframe Presentation Server / Javvin DiskAccess printer provider buffer overflow

Buffer overflow in cpprov.dll EnumPrintersW and OpenPrinter functions...

Immunity Canvas: CITRIX_PP

Name| citrixpp ---|--- CVE| CVE-2007-0444 Exploit Pack| CANVAS Description| Citrix MetaFrame XP Print Provider Overflow Notes| CVE Name: CVE-2007-0444 VENDOR: Citrix Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-006.html CVE Url:...

DSquare Exploit Pack: D2SEC_WFICA

Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow // source: https://www.securityfocus.com/bid/21220/info Novell Client is prone to a remote buffer-overflow vulnerability. Successful exploits may result in a denial-of-service condition or arbitrary code execution. Remote, anonymous attacker...

Citrix Metaframe multiple security vulnerabilities

DoS and buffer overflow in IMA service TCP/2512, TCP/2513...

CVE-2006-5821

Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture IMA service ImaSrv.exe with invalid...

CVE-2006-5821

CVE-2006-5821 affects Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. The flaw is a heap-based overflow in ImaSystem.dll’s IMA_SECURE_DecryptData1 during decryption of authentication data via the IMA service (ImaSrv.exe). An attacker can supply invalid size values through the IMA por...

CVE-2006-5821

Heap-based buffer overflow in the IMASECUREDecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture IMA service ImaSrv.exe with invalid...

[Full-disclosure] ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow

ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-038.html November 9, 2006 -- CVE ID: CVE-2006-5821 -- Affected Vendor: Citrix -- Affected Products: Citrix MetaFrame XP 1.0 Citrix MetaFrame XP 2.0 Citrix MetaFrame...