CVE-2008-0356

Citrix Presentation Server < 4.5, Access Essentials < 2.0, Desktop Server - RCE via IMA Service

Title source: llm
STIX 2.1

Description

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/486585/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28508
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0172
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/412228
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019231
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27329
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-08-002.html

Scores

EPSS 0.7117
EPSS Percentile 98.7%

Details

CWE
CWE-119
Status published
Products (4)
citrix/access_essentials < 2.0
citrix/desktop_server 1.0
citrix/metaframe_presentation_server < 4.5
citrix/presentation_server
Published Jan 18, 2008
Tracked Since Feb 18, 2026