Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:CITRIX:META-IMA-AUTH |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Citrix MetaFrame IMA Authentication Processing Buffer Overflow |
Release Date |
2010/09/15 |
Update Number |
1774 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Citrix MetaFrame IMA Authentication Processing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Citrix MetaFrame IMA. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Citrix Presentation Server's IMA service is prone to multiple remote vulnerabilities. These issues include a buffer-overflow vulnerability and a denial-of-service vulnerability. These issue may allow an attacker to execute arbitrary code on the affected computer or to cause denial-of-service conditions.
Affected Products
- Citrix metaframe XP
- Citrix metaframe XPa
- Citrix metaframe XPe
- Citrix metaframe XPs
- Citrix metaframe XP SP1
- Citrix metaframe XP SP2
- Citrix metaframe_presentation_server 3.0.0
- Citrix metaframe_presentation_server 4.0.0
- Citrix metaframe_xp_for_microsoft_windows_2000 1.0.0
- Citrix metaframe_xp_for_microsoft_windows_2003 1.0.0
- Citrix metaframe_xp_for_ms_nt_4.0_server_terminal_server 1.0.0
- Citrix metaframe_xp_presentation_server_for_windows 1.0.0
- Citrix presentation_server 4.0
References
- BugTraq: 20986
- CVE: CVE-2006-5821
- CVE: CVE-2006-5861