RETIRED: Citrix XenServer Multiple Security Vulnerabilities

Bugtraq ID:	102129
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Dec 01 2017 12:00AM
Updated:	May 15 2019 04:00PM
Credit:	The vendor reported this issue.
Vulnerable:	Citrix XenServer 6.0.2 Citrix XenServer 7.2 Citrix XenServer 7.1 LTSR CU1 Citrix XenServer 7.1 Citrix XenServer 7.0 Citrix XenServer 6.5 Citrix XenServer 6.2
Not Vulnerable:	Citrix XenServer 6.0.2 Common Criteria Citrix XenServer 6.5 Service Pack 1 Citrix XenServer 6.2 Service Pack 1

RETIRED: Citrix XenServer Multiple Security Vulnerabilities

Citrix XenServer is prone to multiple security vulnerabilities.

An attacker can exploit these issues to run arbitrary code within the context of the application, perform unauthorized actions and can cause denial-of-service conditions.

XenServer 7.2, 7.1 LTSR Cumulative Update 1, 7.1, 7.0, 6.5, 6.2.0, and 6.0.2.

This BID is being retired as a duplicate. The issues mentioned are already covered in BIDs 102013 and 97955.

RETIRED: Citrix XenServer Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Citrix XenServer Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Citrix XenServer Multiple Security Vulnerabilities

References:

• Citrix Homepage (Citrix)
  
• Citrix XenServer Multiple Security Updates (Citrix)