Citrix XenServer Local Denial of Service Vulnerability

Bugtraq ID:	41207
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jun 17 2010 12:00AM
Updated:	Jun 29 2010 04:18PM
Credit:	Tor Martin Slåen and Vegard Nossum of Sygard.no
Vulnerable:	Citrix XenServer 5.5 Citrix XenServer 5.0
Not Vulnerable:	Citrix XenServer 5.6

Citrix XenServer Local Denial of Service Vulnerability

Citrix XenServer is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected computer, denying service to legitimate users.

Citrix XenServer versions 5.0 and 5.5 are affected.

Citrix XenServer Local Denial of Service Vulnerability

Currently we are not aware of any exploits for the issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Citrix XenServer Local Denial of Service Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Citrix XenServer Local Denial of Service Vulnerability

References:

• Citrix XenServer Homepage (Citrix)
  
• Vulnerability in Citrix XenServer Could Result in Denial of Service (Citrix)