PT-2002-1555 · Citrix · Citrix Nfuse

Published 2002-06-11 · Updated 2008-09-05 · CVE-2002-0504

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix NFuse versions 1.6 and earlier

Description The issue is related to a cross-site scripting vulnerability. It does not properly quote results from the getLastError method, allowing remote attackers to execute script in other clients. This can be achieved via the NFuse Application parameter to launch.jsp or launch.asp API endpoints.

Recommendations For Citrix NFuse versions 1.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0504

Affected Products

Citrix Nfuse

References · 5

• 🔥 https://exploit-db.com/exploits/21355 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-03/0334.html · Exploit
• 🔥 http://iss.net/security_center/static/8659.php · Exploit
• 🔥 http://securityfocus.com/bid/4372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0504 · Security Note