CVE-2012-3498

CVE-2012-3498 affects Xen 4.1/4.2 and Citrix XenServer 6.0.2 and earlier. The vulnerability (PHYSDEVOP_map_pirq index) arises from a missing range check on map->index, enabling a local HVM guest to crash the host and potentially read hypervisor/guest memory. Impact per sources: Denial of Servi...

CVE-2012-3496

XENMEMpopulatephysmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service BUG triggered and host crash via invalid flags such as MEMFpopulateondemand...

CVE-2012-3516

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

CVE-2012-3495

The physdevgetfreepirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the getfreepirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service invali...

Citrix XenServer本地权限提升漏洞(CVE-2012-4606)

CVE ID: CVE-2012-4606 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer存在本地权限提升漏洞，可以访问客户端操作系统的本地攻击者可利用此漏洞在受影响计算机上获取提升的权限。 0 Citrix XenServer 6.0 Citrix XenServer 5.x Citrix XenServer 4.1 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.citrix.com/...

Virtual Machine Escape Exploit Targets Xen

Details of a dangerous virtual machine escape exploit were revealed Wednesday by French research outfit VUPEN Security. The attack exploits a recently reported vulnerability in Xen hypervisors and allows an attacker within a guest virtual machine to escape to the host and execute code. Virtual...

Privilege Escalation in Intel® Hybrid Cloud (IHC)

Summary: A Citrix XenServer potential vulnerability has recently been reported that could pose a security risk to any system using XenServer Hypervisor, including the Intel® Hybrid Cloud IHC platform which uses Citrix XenServer VMM as the virtualization platform. While we are not aware of any...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

Citrix XenServer vSwitch Controller Component Multiple Vulnerabilities

Citrix XenServer is prone to multiple unspecified vulnerabilities. The impact of these issues is currently unknown. We will update this BID when more information emerges. Citrix XenServer versions 5.6, 5.6 FP 1, 5.6 SP 2, and 6 are vulnerable. OpenVAS Vulnerability Test $Id:...

Citrix XenServer vSwitch Controller Component Multiple Vulnerabilities (CTX132476) - Active Check

Citrix XenServer is prone to multiple unspecified vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Citrix XenServer vSwitch Controller < 2.0.0+build11349 Multiple Vulnerabilities

The Citrix XenServer vSwitch Controller instance running on the remote host is affected by multiple, unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid58810; scriptversion"1.5";...

Citrix XenServer vSwitch Controller Detection

Citrix XenServer vSwitch Controller, a web interface for managing virtual machine networking, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58809; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Citrix XenServer...

Citrix XenServer Workload Balancer Detection

Citrix XenServer Workload Balancer, a daemon for migrating virtual machines between Xen hosts based on load, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58749; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25";...

Citrix XenServer Web Self Service Detection

Citrix XenServer Web Self Service, a web interface for managing virtual machines, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58209; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Citrix XenServer Web Self...

Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

PT-2011-38: URL redirector abuse in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an URL redirector abuse in Citrix XenServer Virtual Switch Controller. URL redirector GET parameter lastpage of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix Update your software up...

PT-2011-34: HTTP Response Splitting in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "HTTP Response Splitting" vulnerability in Citrix XenServer Web Self Service. GET parameter page of the login page allows one to insert an arbitrary HTTP header into the server response. How to fix Update your software up to the latest...

PT-2011-32: Cross-site scripting in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "Cross-site scripting" vulnerability in Citrix XenServer Web Self Service. Since special characters in usernames are not properly escaped a stored XSS attack is possible. How to fix Update your software up to the latest version Advisor...

PT-2011-31: Multiple Cross-Site Request Forgery vulnerabilities in Citrix XenServer Web Self Service

The specialists of the Positive Research center have detected "Cross-Site Request Forgery" vulnerabilities in Citrix XenServer Web Self Service. All web interface forms are vulnerable to CSRF attacks. One can exploit these vulnerabilities to change the system configuration. How to fix Update your...