CVEvulnerability
CVE-2008-0356
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.
Affected configurations
• citrix access essentials (<= 2.0)
• citrix desktop server 1.0
• citrix metaframe presentation server (<= 4.5)
• citrix presentation server
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/28508 Vendor Advisory
- http://support.citrix.com/article/CTX114487 Patch
- http://www.kb.cert.org/vuls/id/412228 US Government Resource
- http://www.securityfocus.com/archive/1/486585/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27329 www.securityfocus.com
- http://www.securitytracker.com/id?1019231 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0172 www.vupen.com
- http://zerodayinitiative.com/advisories/ZDI-08-002.html zerodayinitiative.com
- http://secunia.com/advisories/28508 Vendor Advisory
- http://support.citrix.com/article/CTX114487 Patch
- http://www.kb.cert.org/vuls/id/412228 US Government Resource
- http://www.securityfocus.com/archive/1/486585/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27329 www.securityfocus.com
- http://www.securitytracker.com/id?1019231 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0172 www.vupen.com
- http://zerodayinitiative.com/advisories/ZDI-08-002.html zerodayinitiative.com