< Back to JetLib.com

jetlib.sec » Tags » provisioning-services

« Expand/Collapse

32 items tagged "provisioning services"

Related tags: stack buffer [+], zero [+], vulnerability [+], day [+], exe component [+], exe [+], buffer overflow [+], udp port [+], remote buffer overflow [+], remote [+], buffer [+], windows [+], stream service [+], stream [+], security advisory [+], secunia [+], exploits [+], streamprocess [+], security [+], advisory [+], citrix [+], provisioning [+], zero day [+], code execution [+]

May 01, 2012
18:40
Secunia Security Advisory 48971
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Citrix Provisioning Services, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security provisioning-services security-advisory

February 10, 2012
14:33
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3.
Tags: citrix provisioning windows remote-buffer-overflow udp-port provisioning-services

14:33
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3.
Tags: citrix provisioning windows remote-buffer-overflow udp-port provisioning-services

14:33
Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet to the 6905/UDP port. The module has been successfully tested on Windows Server 2003 SP2, Windows 7, and Windows XP SP3.
Tags: remote-buffer-overflow udp-port provisioning-services

14:00
[remote exploits] - Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode Buffer Overflow
Tags: citrix streamprocess provisioning buffer-overflow provisioning-services exploits

0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services

January 10, 2012
23:29
Zero Day Initiative Advisory 12-010
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-010 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020006 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: stack-buffer provisioning-services zero-day

23:29
Zero Day Initiative Advisory 12-010
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-010 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020006 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: stack-buffer provisioning-services zero-day

23:29
Zero Day Initiative Advisory 12-010
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-010 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020006 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: day zero vulnerability stack-buffer provisioning-services zero-day

23:17
Zero Day Initiative Advisory 12-009
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-09 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020000 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: day zero vulnerability stack-buffer provisioning-services zero-day

23:17
Zero Day Initiative Advisory 12-009
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-09 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020000 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: stack-buffer provisioning-services zero-day

23:17
Zero Day Initiative Advisory 12-009
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-09 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The flaw exists within the streamprocess.exe component. This process listens on UDP port 6905. When handling a request type 0x40020000 the process uses the user supplied length in an attempted bounds check before copying to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Tags: day zero vulnerability stack-buffer provisioning-services zero-day

13:00
Bugtraq: ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services
13:00
Bugtraq: ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability
Tags: citrix stream provisioning stream-service code-execution provisioning-services
13:00
Bugtraq: ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability
Tags: citrix stream provisioning stream-service code-execution provisioning-services

5:13
Zero Day Initiative Advisory 12-008
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-08 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens for UDP traffic on multiple ports, beginning with 6905. When handling a packet which requests a vDisk name, the user-supplied length value is not properly validated. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: exe-component provisioning-services zero-day

5:13
Zero Day Initiative Advisory 12-008
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-08 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens for UDP traffic on multiple ports, beginning with 6905. When handling a packet which requests a vDisk name, the user-supplied length value is not properly validated. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component provisioning-services zero-day

5:13
Zero Day Initiative Advisory 12-008
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-08 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens for UDP traffic on multiple ports, beginning with 6905. When handling a packet which requests a vDisk name, the user-supplied length value is not properly validated. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component provisioning-services zero-day

0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services
0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services

November 01, 2011
23:20
Secunia Security Advisory 46162
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in Citrix Provisioning Services, which can be exploited by malicious people to compromise a vulnerable system.
Tags: provisioning-services secunia security-advisory

September 28, 2011
0:00
Vuln: Citrix Provisioning Services Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services Remote Code Execution Vulnerability
Tags: citrix remote provisioning code-execution provisioning-services
June 28, 2011
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services

June 27, 2011
16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

16:18
Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack buffer overflow in Citrix Provisioning Services 5.6. By sending a specially crafted packet to the Provisioning Services server, a fixed length buffer on the stack can be overflowed and arbitrary code can be executed.
Tags: citrix buffer provisioning stack-buffer provisioning-services buffer-overflow

June 26, 2011
21:00
[remote exploits] - Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
» ‎ 1337day (was: Inj3ct0r, 1337db)

[remote exploits] - Citrix Provisioning Services 5.6 streamprocess.exe Buffer Overflow
Tags: exe citrix provisioning buffer-overflow provisioning-services exploits

February 22, 2011
0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: code-execution provisioning-services citrix

January 20, 2011
18:30
Zero Day Initiative Advisory 11-023
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-023 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens by default on UDP port 6095. When handling a packet of type 0x40020010 the process blindly copies user supplied data into a fixed length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component provisioning-services zero-day

18:30
Zero Day Initiative Advisory 11-023
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-023 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens by default on UDP port 6095. When handling a packet of type 0x40020010 the process blindly copies user supplied data into a fixed length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component provisioning-services zero-day

18:30
Zero Day Initiative Advisory 11-023
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-023 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Citrix Provisioning Services. Authentication is not required to exploit this vulnerability. The specific flaw exists within the streamprocess.exe component which listens by default on UDP port 6095. When handling a packet of type 0x40020010 the process blindly copies user supplied data into a fixed length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component provisioning-services zero-day

0:00
Vuln: Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Citrix Provisioning Services 'streamprocess.exe' Component Remote Code Execution Vulnerability
Tags: exe citrix provisioning code-execution provisioning-services