CVE-2006-5821

Citrix MetaFrame and Presentation Server - Remote Code Execution via IMA Service Decryption Overflow

Title source: llm

Description

Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/451337/100/100/threaded

Third Party Advisory x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-06-038.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/30148

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017205

Patch x_refsource_confirm

http://support.citrix.com/article/CTX111186

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/20986

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22802

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4429

Scores

EPSS 0.0943

EPSS Percentile 92.9%

Details

Status published

Products (3)

citrix/metaframe 1.0

citrix/metaframe 3.0

citrix/metaframe_presentation_server 4.0 (3 CPE variants)

Published Nov 10, 2006

Tracked Since Feb 18, 2026