Citrix Provisioning Services Server Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Citrix Provisioning Services 6.x
Citrix Provisioning Services 5.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53330

Citrix Provisioning Services allows you to create a set of images that use stream technology to transmit physical and virtual servers, reducing storage requirements and achieving fast, consistent, and reliable application deployment.

The Citrix Provisioning Services service has an error in processing specially crafted message requests and can be exploited to execute arbitrary code.

<* Source: vendor

Link: http://secunia.com/advisories/48971/

Http://support.citrix.com/article/CTX133039
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Citrix
------
Citrix has released a Security Bulletin (CTX133039) for this purpose and corresponding patches:

CTX133039: Vulnerability in Citrix Provisioning Services cocould Result in Arbitrary Code Execution

Link: http://support.citrix.com/article/CTX133039