Citrix MetaFrame Server Detection

Binary data 2809.prm...

CVE-2005-0821

Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext (even if obfuscated in UI), enabling users to view secondary passwords contrary to policy. Documented impact is partial disclosure of credentials. The vulnerability details across sources (NVD/CVE records) specify af...

CVE-2005-0821

Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...

Citrix Metaframe secondary application password leak

It's possible to obtain secondary application password from the HTML source...

[SA14560] Citrix MetaFrame Password Manager Secondary Password Disclosure

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

CVE-2004-1902

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...

Citrix Metaframe XP buffer overflow

No description provided...

[SA13618] Citrix Metaframe XP Unspecified Buffer Overflow Vulnerability

TITLE: Citrix Metaframe XP Unspecified Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13618 VERIFY ADVISORY: http://secunia.com/advisories/13618/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network SOFTWARE: Citrix MetaFrame XP for Windows...

Citrix MetaFrame Published Application Enumeration

Binary data 1945.prm...

Citrix MetaFrame Service Enumeration

Binary data 1953.prm...

Citrix MetaFrame XP login.asp NFuse_Message Parameter XSS

The remote server is running a Citrix Web Interface server that is vulnerable to cross-site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a cross-site scripting attack...

cqure.net.20040430.citrixmetaframe

Hi, The following advisory has been released by cqure.net. The severity level has been set to low, as in Citrix's advisory available at; http://support.citrix.com/kb/entry.jspa?entryID=4289&categoryID=118 The reason for the low severity is the fact that you have to be local admin on the Citrix...

Citrix Metaframe client disk access

Server administrator can access client drives...

CVE-2003-1157

Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...

IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scripting

---------------------------------------------------------------------------- IRM Security Advisory No. 008 Citrix Metaframe XP is vulnerable to Cross Site Scripting Vulnerablity Type / Importance: XSS / Medium Problem discovered: August 18th 2003 Vendor contacted: August 18th 2003 Advisory...

Citrix Metaframe crossite scripting

login.asp crossite scripting...

Citrix Metaframe XP - Cross-Site Scripting

Citrix Metaframe XP - Cross-Site Scripting source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in...

Citrix Metaframe XP - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in page. Exploitation of this issue could...

hackingcitrix.txt

Hacking Citrix: Last Updated: Oct 2nd 9:00PM Found 'Respond to Broad Cast Packets' to NOT break Ian Viteks scanner, so much for that! - Oct 1st, 2002 10:36AM Minor Corrections in Introduction - Introduction - How Citrix Works - Peeling Citrix Back - Securing Citrix... Sort of. .Introduction Citri...