CVE-2006-5821

Related Files

Zero Day Initiative Advisory 06-038

Posted Nov 13, 2006

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix MetaFrame Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine IMA_SECURE_DecryptData1() defined in ImaSystem.dll and is reachable through the Independent Management Architecture (IMA) service (ImaSrv.exe) that listens on TCP port 2512 or 2513. The encryption scheme used is reversible and relies on several 32-bit fields indicating the size of the packet and the offsets to the authentication strings. During the decryption of authentication data an attacker can specify invalid sizes that result in an exploitable heap corruption.

tags | advisory, arbitrary, tcp

advisories | CVE-2006-5821

SHA-256 | 85f81d263737b72b51ceb60707eb84886803fabd9d979123dee1461b13db004f

Download | Favorite | View