Vulnerability CVE-2008-0356
Published: 2008-01-18   Modified: 2012-02-12

Description:
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Citrix -> Access essentials 
Citrix -> Desktop server 
Citrix -> Metaframe presentation server 
Citrix -> Presentation server 

 References:
http://support.citrix.com/article/CTX114487
http://www.kb.cert.org/vuls/id/412228
http://www.securityfocus.com/archive/1/486585/100/0/threaded
http://www.securityfocus.com/bid/27329
http://www.securitytracker.com/id?1019231
http://www.vupen.com/english/advisories/2008/0172
http://zerodayinitiative.com/advisories/ZDI-08-002.html
Copyright 2024, cxsecurity.com

 

Back to Top