Citrix XenDesktop client driver ing Policy Bypass Security Vulnerability

Release date: 2011-11-03
Updated on: 2011-11-04

Affected Systems:
Citrix XenDesktop 4.x
Description:
--------------------------------------------------------------------------------
Citrix XenDesktop is a desktop virtualization product of Citrix.

Citrix XenDesktop has a security vulnerability in the implementation of client driver ing. When a policy is applied on a virtual desktop proxy, illegal access to the client driver is restricted. To exploit this vulnerability, You need to disable the client driver ing on the server side.

<* Source: vendor

Link: http://support.citrix.com/article/CTX131198
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Citrix
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.citrix.com/