CVE-2008-0356
high · 10Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.
10
CVSS
73.0%
EPSS (exploit prob.)
99th
EPSS percentile
2008-01-18
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| citrix | access_essentials | <= 2.0 |
| citrix | desktop_server | 1.0 |
| citrix | metaframe_presentation_server | <= 4.5 |
| citrix | presentation_server | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/28508
- http://support.citrix.com/article/CTX114487
- http://www.kb.cert.org/vuls/id/412228
- http://www.securityfocus.com/archive/1/486585/100/0/threaded
- http://www.securityfocus.com/bid/27329
- http://www.securitytracker.com/id?1019231
- http://www.vupen.com/english/advisories/2008/0172
- http://zerodayinitiative.com/advisories/ZDI-08-002.html
- http://secunia.com/advisories/28508
- http://support.citrix.com/article/CTX114487
- http://www.kb.cert.org/vuls/id/412228
- http://www.securityfocus.com/archive/1/486585/100/0/threaded
- http://www.securityfocus.com/bid/27329
- http://www.securitytracker.com/id?1019231
- http://www.vupen.com/english/advisories/2008/0172
- http://zerodayinitiative.com/advisories/ZDI-08-002.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-0356