|
Citrix MetaFrame Presentation Server Client Debugging Security Issue
|
|
Secunia Advisory:
|
SA13246
|
|
|
Release Date:
|
2004-11-22
|
|
Last Update:
|
2005-04-26
|
|
Popularity:
|
11,290 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
Exposure of sensitive information
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Citrix ICA Clients 6.x
Citrix ICA Clients 7.x
Citrix Program Neighborhood Agent 8.x
Citrix Program Neighborhood Client 8.x
Citrix Web Client 8.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
A security issue has been reported in Citrix MetaFrame Presentation Server Client, which can be exploited by malicious users to gain knowledge of sensitive information.
The problem is that the client includes a debugging feature (disabled by default), which can be used to create a log file of the keyboard scan codes sent during an ICA connection. This can be exploited to gain knowledge of sensitive information (e.g. another user's credentials) by tricking that user into using a client with the debugging feature enabled.
The security issue affects version 8.0 and prior of the following Windows clients:
* ICA Win32 Web Client
* ICA Win32 Program Neighborhood Client
* ICA Win32 Program Neighborhood Agent
Solution:
Version 8.1 does not include this functionality.
http://www.citrix.com/site/SS/downloa...2755&downloadID=13336&pID=186
Provided and/or discovered by:
The vendor credits the following people:
* Andre van der Lingen, Interpay Netherlands.
* Robert-Jan Mora, Hoffmann Investigations.
Changelog:
2005-04-26: Updated advisory.
Original Advisory:
Citrix:
http://support.citrix.com/kb/entry.jspa?entryID=5536&categoryID=149
Hoffmann:
http://www.hoffmannbv.nl/forensisch/nieuws/citrixkeyboardlogger.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
