CVE-2008-0356
Critical
Description
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Citrix Access Essentials
PublishedJan 18, 2008
First seenJan 18, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix access_essentials | v ≤ 2.0 | — |
| citrix desktop_server | 1.0 | — |
| citrix metaframe_presentation_server | v ≤ 4.5 | — |
| citrix presentation_server | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.