PT-2012-5810 · Citrix · Citrix Xenapp

Published 2012-12-26 · Updated 2024-09-14 · CVE-2012-5161

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix XenApp versions 6.5 and 6.5 Feature Pack 1

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors in the XML Service interface.

Recommendations For Citrix XenApp versions 6.5 and 6.5 Feature Pack 1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2012-5161

Affected Products

Citrix Xenapp

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-5161 · Security Note
• http://support.citrix.com/article/CTX135066 · Vendor Advisory
• http://secunia.com/advisories/51538 · Vendor Advisory
• https://twitter.com/ShanHolo/status/1834903829961159029 · Twitter Post
• http://osvdb.org/88368 · Note
• http://securityfocus.com/bid/56907 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80627 · Note
• http://securitytracker.com/id?1027868 · Note