This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities.

Successful exploitation could allow remote attackers to bypass certain security restrictions and cause denial-of-service condition. Impact Level: Application

Upgrade to Citrix Licensing Administration Console 11.10 or later. For updates refer to http://www.citrix.com/downloads.html

The flaws are caused by errors in a third-party component that is used by the administration console, which could allow an attacker to cause a denial of service or gain unauthorized access to some license administration functionality by tricking an administrator into visiting a malicious web site.

Citrix Licensing Administration Console 11.6 and Prior.

• http://secunia.com/advisories/43459
• http://support.citrix.com/article/CTX128167
• http://www.securitytracker.com/id?1025123
• http://www.vupen.com/english/advisories/2011/0477

---

Updated on 2015-03-25