Multiple security vulnerabilities in Citrix XenServer Web Self Service

Release date:
Updated on:

Affected Systems:
Citrix XenServer 6.0
Citrix xenserver5.6 SP2
Citrix XenServer 5.6
Citrix XenServer 5.5
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52050

Citrix XenServer product line is an enterprise-level platform for managing server virtualization in a data center through flexible aggregation of computing and storage resources.

Security Vulnerabilities exist in the Web management interface of Citrix XenServer Web Self Service, which may affect versions earlier than Web Self Service 1.1.1.

<* Source: Kirill Korotaev (dev@sw.ru)
Maxin Tsoy
Ilya Smith

Link: http://secunia.com/advisories/48007/
Http://support.citrix.com/article/CTX132219
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Citrix
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.citrix.com/