Unscored severity · published Jan 18, 2008
CVE-2008-0356
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and…
–
CVSS
73%
EPSS
No
On KEV
Description
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Access Essentials · Citrix
through 2.0 · source: NVD
DS
Desktop Server · Citrix
1.0 · source: NVD
MP
Metaframe Presentation Server · Citrix
through 4.5 · source: NVD
PS
Presentation Server · Citrix
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0356
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0356
Vendor Advisory
http://secunia.com/advisories/28508
Patch
http://support.citrix.com/article/CTX114487
US Government Resource
http://www.kb.cert.org/vuls/id/412228
www.securityfocus.com
http://www.securityfocus.com/archive/1/486585/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/27329
www.securitytracker.com
http://www.securitytracker.com/id?1019231
More from Access Essentials
–
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows…
–
CVE-2008-2299
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause…
–
CVE-2008-2300
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users…
–
CVE-2007-2850
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass…
–
CVE-2002-2426
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote…