CVE-2008-0356

CVE-2008-0356 describes a heap-based buffer overflow in Citrix Presentation Server’s Independent Management Architecture (IMA) service (ImaSrv.exe). By sending crafted packets to the IMA ports 2512/2513, an unauthenticated remote attacker could overflow a heap buffer and execute arbitrary code wi...

CVE-2007-0444

CVE-2007-0444 affects Citrix Presentation Server 4.0, Citrix MetaFrame Presentation Server 3.0, and Citrix MetaFrame XP 1.0. It is a stack-based/buffer overflow in the print provider library (cpprov.dll) that occurs when long arguments are passed to EnumPrintersW or OpenPrinter, allowing executio...

CVE-2007-3625

The vulnerability CVE-2007-3625 concerns the Program Neighborhood Agent (PNAgent) component of Citrix Presentation Server Client on 32-bit Windows. A crafted content-redirection request with a long pathname can cause the PNAgent to exit, resulting in a denial-of-service condition. Affected are Ci...

CVE-2008-2300

CVE-2008-2300 affects Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0. The vulnerability allows remote authenticated users to access unauthorized desktops via unknown attack vectors. The connected documents do not provide concret...

CVE-2006-5821

CVE-2006-5821 affects Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. The flaw is a heap-based overflow in ImaSystem.dll’s IMA_SECURE_DecryptData1 during decryption of authentication data via the IMA service (ImaSrv.exe). An attacker can supply invalid size values through the IMA por...

CVE-2008-3485

Technical details about CVE-2008-3485 are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries or vendor advisories.

CVE-2006-3779

CVE-2006-3779 affects Citrix MetaFrame up to XP 1.0 Feature 1 on Windows Server 2003. The issue is a registry key created with an insecure ACL, which allows remote authenticated users to gain privileges. The root cause is improper ACL protection on a registry entry, enabling elevation of privileg...

CVE-2006-5861

CVE-2006-5861 affects Citrix MetaFrame XP (1.0/2.0) and Presentation Server (3.0/4.0). The Independent Management Architecture (IMA) service (ImaSrv.exe) is vulnerable to a memory access violation triggered by a crafted packet, causing an unhandled exception and remote denial of service via servi...

CVE-2002-2426

The CVE-2002-2426 entry describes a CSRF vulnerability in Citrix Presentation Server 4.0/4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0–2.0. The issue arises from the InitialProgram key in an ICA connection, allowing remote attackers to run published applications (and possibly ...