CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Design/Logic Flaw

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

CVE-2013-6077

The vulnerability CVE-2013-6077 affects Citrix XenDesktop 7.0 when upgraded from XenDesktop 5.x, where policy rule permissions may not be enforced, enabling a remote attacker to bypass intended restrictions. Affected: XenDesktop 7.0 upgrades from 5.x (customers upgrading from 5.6 or earlier to 7....

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Citrix XenDesktop Director Detection

Binary data citrixxendesktopdirectordetect.nbin...

Citrix XenDesktop BrokerAccessPolicyRule Policy Rule Remote Security Bypass

The remote host is running a version of Citrix XenDesktop that could be affected by a remote security bypass vulnerability, related to the 'BrokerAccessPolicyRule' policy rule. Note that this vulnerability only affects installations that have been upgraded from XenDesktop 5. Also, Nessus has not...

CVE-2013-6077 - Vulnerability in XenDesktop 7.0 Upgrade Could Result in Policy Bypass

Description of Problem A vulnerability has been identified in Citrix XenDesktop 7.0 that could prevent policy rules from being correctly applied following an upgrade from earlier versions of Citrix XenDesktop. This vulnerability affects deployments of Citrix XenDesktop that have been upgraded fro...

CVE-2012-6314

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

Command injection

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

CVE-2012-6314

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

CVE-2012-6314

CVE-2012-6314 affects Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x prior to 5.6.200. The issue is that server‑side USB redirection policy changes are not propagated to the VDA, allowing authenticated users to retain access to USB devices even after policy disables USB redirection. The vuln...

Citrix XenDesktop Virtual Desktop Agent USB Redirection Propagation Handling Access Restriction Bypass (CTX135813)

The version of Citrix XenDesktop Virtual Desktop Agent contains a flaw in the server-side USB redirection policy. This could allow an authenticated user to gain access to their USB devices when the server-side policy has been modified to disable USB redirection. C Tenable Network Security, Inc...

Citrix Receiver, XenDesktop "Pass-the-hash" Attack

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

Citrix XenApp and XenDesktop XML Service Interface Stack Buffer Overflow

A code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to the improper handling of NFuse RequestValidateCredentials requests. A remote attacker may exploit this vulnerability by sending a malicious packet to the target service. Successful...

Citrix XenApp and XenDesktop XML Service Interface Code Execution

A remote code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to an error in the way the application processes invalid URIs. A remote attacker could exploit this vulnerability by sending a malicious packet to the target service. Successfu...

n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk:...

n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.002 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Heap Corruption in Citrix XML Service Risk: HIGH Vendor...

Citrix XenApp / XenDesktop security vulnerabilities

Buffer overflow, heap memory corruption...

Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer...