103 matches found
Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...
Citrix Presentation Server Client WFICA.OCX ActiveX - Heap BOF Exploit
No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...
Citrix Presentation Server 4.5 ActiveSync Feature Code Execution
The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by a code execution vulnerability in the ActiveSync Feature. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges...
Citrix Presentation Server 4.5 Multiple Vulnerabilities
The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple vulnerabilities : - The application can cause clients to use weaker encryption settings than configured by the administrator, which could allow attackers to bypass intended...
Citrix Presentation Server 4.5 Code Execution
The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple code execution vulnerabilities. By sending a specially crafted packet to the IMA server process, a remote, unauthenticated attacker could execute arbitrary code subject to the...
Citrix Presentation Server Client buffer overflow
Buffer overflow on ICA server response parsing...
Citrix Web Interface源码信息泄露漏洞
BUGTRAQ ID: 38838 Citrix Web Interface是Citrix Presentation Server上使用的免费附件组件，允许用户使用浏览器连接到应用。 Citrix Web Interface的ClientScripts文件夹中的JavaScript文件包含有ASP.NET代码，Citrix ASPX文件会引用这些文件用于解析JS文件中的ASP.NET内容，解析后所生成的JavaScript内容在浏览器中ASPX页面显示。...
Citrix Program Neighborhood Agent Arbitrary Shortcut Creation (CVE-2004-1077)
Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access these applications remotely. There exists an arbitrary...
Citrix Program Neighborhood Agent Buffer Overflow (CVE-2004-1078)
Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access the applications remotely. There exists a buffer overflow...
Citrix Presentation Server IMA Invalid Event Data Length Denial of Service (CVE-2006-5861)
The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a memory access violation vulnerability in...
Information disclosure
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges...
CVE-2008-6561
CVE-2008-6561 affects the Citrix Presentation Server Client for Windows prior to version 10.200. The issue is that it does not clear credential information from process memory under unspecified circumstances, which could allow local users to gain privileges. The provided documents confirm the aff...
CVE-2008-6561
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges...
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
Design/Logic Flaw
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
CVE-2008-5107
CVE-2008-5107 affects Citrix Presentation Server 4.5 and Citrix Desktop Server 1.0. When MSI logging is enabled, the installation process stores database credentials in MSI log files, allowing local users to read them and obtain credentials. Root cause described as the logging process exposing se...
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...
CVE-2008-4676
Summary: CVE-2008-4676 describes an unspecified local privilege-escalation vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0. The issue is triggered by unknown attack vectors related to cr...