CVE-2008-0356

2008-01-1822:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-0356

buffer overflow

citrix presentation server

ima service

remote code execution

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.84 High

EPSS

Percentile

98.5%

JSON

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

Affected configurations

NVD

Node

citrixaccess_essentialsRange≤2.0

citrixdesktop_serverMatch1.0

citrixmetaframe_presentation_serverRange≤4.5

citrixpresentation_server

CPENameOperatorVersion
citrix:access_essentialscitrix access essentialsle2.0
citrix:desktop_servercitrix desktop servereq1.0
citrix:metaframe_presentation_servercitrix metaframe presentation serverle4.5
citrix:presentation_servercitrix presentation servereq*

CPE	Name	Operator	Version
citrix:access_essentials	citrix access essentials	le	2.0
citrix:desktop_server	citrix desktop server	eq	1.0
citrix:metaframe_presentation_server	citrix metaframe presentation server	le	4.5
citrix:presentation_server	citrix presentation server	eq	*