< Back to JetLib.com

jetlib.sec » Tags » citrix

« Expand/Collapse

60 items tagged "citrix"

Related tags: vulnerability [+], based buffer overflow [+], xendesktop [+], xenserver [+], control stack [+], activex [+], remote [+], exe [+], buffer overflow [+], xenapp [+], hash [+], denial of service [+], citrix access [+], usa [+], typical interaction [+], stack buffer [+], server [+], receiver version [+], license server [+], license [+], injection [+], ica [+], gupta [+], got [+], exploits [+], edgesight [+], csrf [+], command [+], buffer overflow vulnerability [+], buffer [+], black hat [+], access [+], windows [+], udp port [+], stream service [+], stream [+], safer use [+], remote buffer overflow [+], poc [+], online [+], multiple [+], heap corruption [+], heap [+], gateway user [+], code [+], citrix ica client [+], bugtraq [+], zdi [+], web interface [+], web broswer [+], vulnerabilities [+], vswitch [+], vsr [+], video [+], txt [+], streamprocess [+], service vulnerability [+], service interface [+], service [+], security advisory [+], security [+], secunia [+], receiver [+], overflow vulnerability [+], overflow [+], memory corruption [+], macro code [+], macro button [+], macro [+], local [+], launcher [+], k c [+], hacking [+], hack [+], dos [+], cmd [+], client [+], citrix web [+], authentication [+], audio [+], arbitrary code [+], advisory [+], advisories [+], code execution [+], provisioning services [+], provisioning [+], gateway [+]

March 21, 2012
0:00
Vuln: Citrix XenServer vSwitch Controller Component Multiple Unspecified Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Citrix XenServer vSwitch Controller Component Multiple Unspecified Vulnerabilities
Tags: citrix vswitch xenserver vulnerabilities

March 15, 2012
20:02
Citrix License Server 11.6.1 Build 10007 CSRF
» ‎ Packet Storm Security Exploits

Citrix License Server version 11.6.1 build 10007 suffers from cross site request forgery and denial of service vulnerabilities.
Tags: server citrix license license-server csrf denial-of-service

20:02
Citrix License Server 11.6.1 Build 10007 CSRF
» ‎ Packet Storm Security Recent Files

Citrix License Server version 11.6.1 build 10007 suffers from cross site request forgery and denial of service vulnerabilities.
Tags: server citrix license license-server csrf denial-of-service

20:02
Citrix License Server 11.6.1 Build 10007 CSRF
» ‎ Packet Storm Security Misc. Files

Citrix License Server version 11.6.1 build 10007 suffers from cross site request forgery and denial of service vulnerabilities.
Tags: server citrix license license-server csrf denial-of-service

February 10, 2012
14:33
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3.
Tags: citrix provisioning windows remote-buffer-overflow udp-port provisioning-services

14:33
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3.
Tags: citrix provisioning windows remote-buffer-overflow udp-port provisioning-services

14:00
[remote exploits] - Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow
Tags: citrix streamprocess provisioning buffer-overflow provisioning-services exploits

0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services
January 10, 2012
13:00
Bugtraq: ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services
13:00
Bugtraq: ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability
Tags: citrix stream provisioning stream-service code-execution provisioning-services
13:00
Bugtraq: ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability
Tags: citrix stream provisioning stream-service code-execution provisioning-services
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services
0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services

December 14, 2011
16:54
Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash
» ‎ Packet Storm Security Exploits

Citrix XenDesktop, XenServer, Receiver version 5.6 SP2 suffer from a pass-the-hash attack vulnerability due to not using SSL.
Tags: citrix xenserver xendesktop receiver-version hash

16:54
Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash
» ‎ Packet Storm Security Recent Files

Citrix XenDesktop, XenServer, Receiver version 5.6 SP2 suffer from a pass-the-hash attack vulnerability due to not using SSL.
Tags: citrix xenserver xendesktop receiver-version hash

16:54
Citrix XenDesktop, XenServer, Receiver 5.6 SP2 Pass-The-Hash
» ‎ Packet Storm Security Misc. Files

Citrix XenDesktop, XenServer, Receiver version 5.6 SP2 suffer from a pass-the-hash attack vulnerability due to not using SSL.
Tags: citrix xenserver xendesktop receiver-version hash

8:00
Bugtraq: Citrix Receiver, XenDesktop "Pass-the-hash" Attack
» ‎ SecurityFocus Vulnerabilities

Citrix Receiver, XenDesktop "Pass-the-hash" Attack
Tags: citrix receiver xendesktop hash

December 12, 2011
10:24
Citrix EdgeSight Launcher Service Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix EdgeSight.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code citrix edgesight code-execution safer-use arbitrary-code

September 28, 2011
0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services
August 31, 2011
0:00
Vuln: Citrix Access Gateway Plug-in ActiveX Control Multiple Code Execution Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Citrix Access Gateway Plug-in ActiveX Control Multiple Code Execution Vulnerabilities
Tags: multiple citrix gateway citrix-access code-execution

August 30, 2011
21:00
[local exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
Tags: citrix gateway activex buffer-overflow-vulnerability based-buffer-overflow control-stack

18:31
Citrix Gateway ActiveX Control Stack Based Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in code execution with the privileges of the user who browsed to the exploit page.
Tags: citrix gateway activex based-buffer-overflow control-stack typical-interaction

18:31
Citrix Gateway ActiveX Control Stack Based Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in code execution with the privileges of the user who browsed to the exploit page.
Tags: citrix gateway activex based-buffer-overflow control-stack typical-interaction

18:31
Citrix Gateway ActiveX Control Stack Based Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in code execution with the privileges of the user who browsed to the exploit page.
Tags: citrix gateway activex based-buffer-overflow control-stack typical-interaction

18:00
[local exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
Tags: citrix gateway activex buffer-overflow-vulnerability based-buffer-overflow control-stack
14:00
[remote exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability
Tags: citrix gateway activex buffer-overflow-vulnerability based-buffer-overflow control-stack

August 24, 2011
23:26
Secunia Security Advisory 45726
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Citrix Access Gateway, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory citrix

July 28, 2011
16:00
Bugtraq: n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption
» ‎ SecurityFocus Vulnerabilities

n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption
Tags: citrix xendesktop xenapp heap-corruption bugtraq
13:00
Bugtraq: n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow
» ‎ SecurityFocus Vulnerabilities

n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow
Tags: citrix xendesktop xenapp based-buffer-overflow bugtraq
0:00
Vuln: Citrix XenApp and XenDesktop XML Service Interface Multiple Remote Code Execution Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Citrix XenApp and XenDesktop XML Service Interface Multiple Remote Code Execution Vulnerabilities
Tags: citrix xendesktop xenapp code-execution service-interface

July 27, 2011
21:00
[dos / poc] - Citrix XenApp / XenDesktop XML Service Heap Corruption
» ‎ 1337day (was: Inj3ct0r, 1337db)

[dos / poc] - Citrix XenApp / XenDesktop XML Service Heap Corruption
Tags: dos poc citrix heap-corruption
21:00
[dos / poc] - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[dos / poc] - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow
Tags: poc citrix xenapp based-buffer-overflow

July 14, 2011
0:00
Vuln: Citrix Access Gateway Plug-in ActiveX Control Multiple Code Execution Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Citrix Access Gateway Plug-in ActiveX Control Multiple Code Execution Vulnerabilities
Tags: multiple citrix gateway citrix-access code-execution
June 28, 2011
9:00
Bugtraq: ZDI-11-226: Citrix EdgeSight Launcher Service Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-11-226: Citrix EdgeSight Launcher Service Remote Code Execution Vulnerability
Tags: citrix service edgesight code-execution zdi launcher
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services
0:00
Vuln: Citrix EdgeSight Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix EdgeSight Remote Code Execution Vulnerability
Tags: citrix remote edgesight code-execution vulnerability

June 27, 2011
16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

June 26, 2011
21:00
[remote exploits] - Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
Tags: exe citrix provisioning buffer-overflow provisioning-services exploits

June 23, 2011
8:38
Restricted Citrix Excel Application Escapes
» ‎ Carnal0wnage
SynJunkie has a couple good posts on citrix escapes:

http://synjunkie.blogspot.com/search/label/Citrix

and of course iKat

http://ikat.ha.cked.net/

So recently I had to break out of restricted citrix environment. All I had was Excel 2010 and Word 2010.

I also didnt have a fancy "jump to url" option when I clicked on the title bar and none of the hot keys were working for me. So goal was to get a web broswer or cmd shell.

I was able to create macros though. So first I added the developers ribbon.

Click the visual basic button, and paste in some sweet macro code.

Then you save the file as macro enabled workbook.

Once its saved, you can hit the macro button and run your macro.

and get shell

** To be clear all of this is running remotely on the citrix host.**
The macro code
```
Sub GETSHELL()
'execute EXE file
Shell "CMD /K C:\windows\system32\cmd.exe", vbNormalFocus
End Sub
```
You could also just type a url into excel...

and click it..But that's pretty low tech and not much fun :-)
Again this IE browser is running remotely on the citrix host. From here you can client-side exploit yourself...i.e. java applet exloit... to get your outbound shell.

Tags: citrix cmd macro k-c web-broswer macro-button macro-code hacking

March 04, 2011
0:00
Vuln: Citrix Access Gateway User Credentials Command Injection Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Access Gateway User Credentials Command Injection Vulnerability
Tags: citrix access gateway citrix-access gateway-user
February 22, 2011
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: code-execution provisioning-services citrix
January 20, 2011
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services

December 22, 2010
14:00
[remote exploits] - Citrix Access Gateway Command Injection Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Access Gateway Command Injection Vulnerability
Tags: citrix access gateway exploits vulnerability

12:00
Bugtraq: VSR Advisories: Citrix Access Gateway Command Injection Vulnerability
» ‎ SecurityFocus Vulnerabilities

VSR Advisories: Citrix Access Gateway Command Injection Vulnerability
Tags: citrix vsr advisories vulnerability

December 21, 2010
10:37
Citrix Access Gateway Command Injection
» ‎ Packet Storm Security Exploits

Citrix Access Gateway Command Injection Enterprise Edition up to 9.2-49.8 and Standard and Advanced Editions prior to 5.0 suffer from a remote command injection vulnerability.
Tags: citrix injection command vulnerability

10:37
Citrix Access Gateway Command Injection
» ‎ Packet Storm Security Recent Files

Citrix Access Gateway Command Injection Enterprise Edition up to 9.2-49.8 and Standard and Advanced Editions prior to 5.0 suffer from a remote command injection vulnerability.
Tags: citrix injection command vulnerability

10:37
Citrix Access Gateway Command Injection
» ‎ Packet Storm Security Misc. Files

Citrix Access Gateway Command Injection Enterprise Edition up to 9.2-49.8 and Standard and Advanced Editions prior to 5.0 suffer from a remote command injection vulnerability.
Tags: citrix injection command vulnerability

0:00
Vuln: Citrix Access Gateway User Credentials Command Injection Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Access Gateway User Credentials Command Injection Vulnerability
Tags: citrix access gateway citrix-access gateway-user
December 09, 2010
0:00
Vuln: Citrix Web Interface Unspecified Cross-Site Scripting Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Web Interface Unspecified Cross-Site Scripting Vulnerability
Tags: citrix-web web-interface citrix

October 08, 2010
15:02
Citrix ICA Client ActiveX Memory Corruption Vulnerabillity
» ‎ SecuriTeam

A memory corruption vulnerability was identified in Citrix ICA Client ActiveX control.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: client citrix ica citrix-ica-client memory-corruption safer-use

August 06, 2010
10:00
citrixicaclient-overflow.txt
» ‎ Packet Storm Security Advisories

The Citrix ICA client suffers from a heap offset overflow vulnerability.
Tags: txt citrix ica citrix-ica-client overflow-vulnerability heap

August 04, 2010
0:00
Vuln: Citrix Online Plug-In and ICA Client Heap Overflow Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Online Plug-In and ICA Client Heap Overflow Remote Code Execution Vulnerability
Tags: citrix online ica code-execution heap overflow
0:00
Vuln: Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix XenApp Online Plug-in ActiveX Control Remote Code Execution Vulnerability
Tags: code online remote code-execution citrix vulnerability

July 06, 2010
21:04
[Video] Got Citrix, Hack It!
» ‎ SecDocs

Authors: Shanit Gupta
Tags: Citrix
Event: Black Hat USA 2008

Tags: video citrix got usa black-hat gupta
21:04
[Slides] Got Citrix, Hack It!
» ‎ SecDocs

Authors: Shanit Gupta
Tags: Citrix
Event: Black Hat USA 2008

Tags: citrix got hack usa black-hat gupta
21:04
[Audio] Got Citrix, Hack It!
» ‎ SecDocs

Authors: Shanit Gupta
Tags: Citrix
Event: Black Hat USA 2008

Tags: citrix audio got usa black-hat gupta

June 29, 2010
0:00
Vuln: Citrix XenServer Local Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix XenServer Local Denial of Service Vulnerability
Tags: citrix xenserver local service-vulnerability denial-of-service
February 03, 2010
0:00
Vuln: Citrix XenServer Authentication Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix XenServer Authentication Bypass Vulnerability
Tags: authentication citrix xenserver vulnerability