CVE-2008-0356 Memory corruption in n/a

What is CVE-2008-0356?

CVE-2008-0356 is a critical memory corruption vulnerability in n/a, published on 18 Jan 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.

Weakness: CWE-119

Which versions are affected by CVE-2008-0356?

It affects 4 products.

Products include Citrix Access Essentials, Citrix Desktop Server, Citrix Metaframe Presentation Server, Citrix Presentation Server.

How do I fix CVE-2008-0356?

No fix has been published for CVE-2008-0356 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2008-0356 being exploited?

There is no known exploitation of CVE-2008-0356 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2007-2850 Security feature bypass in n/a Critical 10.0
• CVE-2008-4676 Privilege escalation in n/a Medium 6.8
• CVE-2008-2300 Missing authorization in n/a Medium 6.5
• CVE-2008-2299 Security feature bypass in n/a Medium 5.0
• CVE-2002-2426 Cross-site request forgery in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7h79-q9r5-xp4c.