CVE-2006-5821
Summary
| CVE | CVE-2006-5821 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-11-10 23:07:00 UTC |
| Updated | 2018-10-17 21:45:00 UTC |
| Description | Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Citrix | Metaframe | 1.0 | All | windows_2000 | All |
| Application | Citrix | Metaframe | 3.0 | All | microsoft_windows_2000 | All |
| Application | Citrix | Metaframe | 1.0 | All | windows_2000 | All |
| Application | Citrix | Metaframe | 3.0 | All | microsoft_windows_2000 | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | 64-bit | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | microsoft_windows_2000 | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | microsoft_windows_2003 | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | 64-bit | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | microsoft_windows_2000 | All |
| Application | Citrix | Metaframe Presentation Server | 4.0 | All | microsoft_windows_2003 | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-06-038 | MISC | www.zerodayinitiative.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Citrix Presentation Server IMA Service Bugs Let Remote Users Execute Arbitrary Code and Deny Service - SecurityTracker | SECTRACK | securitytracker.com | |
| Vulnerabilities in Presentation Server's IMA Service could result in a Denial of Service or arbitrary code execution | CONFIRM | support.citrix.com | Patch |
| Citrix Presentation Server IMA Service Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | |
| Citrix Presentation Server IMA Service Multiple Remote Vulnerabilities | BID | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.