CVE Vulnerability

CVE-2008-0356

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

10 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://support.citrix.com/article/CTX114487 Patch
http://zerodayinitiative.com/advisories/ZDI-08-002.html
http://secunia.com/advisories/28508 Vendor Advisory
http://www.kb.cert.org/vuls/id/412228 US Government Resource
http://www.securityfocus.com/bid/27329
http://www.securitytracker.com/id?1019231
http://www.vupen.com/english/advisories/2008/0172
http://www.securityfocus.com/archive/1/486585/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:citrix:metaframe_presentation_server:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:presentation_server:*:*:*:*:*:*:*:*
cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*
cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*
Information

Published : 2008-01-18 10:00

Updated : 2018-10-15 09:59

NVD link : CVE-2008-0356

Mitre link : CVE-2008-0356

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer