Test ID:	1.3.6.1.4.1.25623.1.0.803000
Category:	Buffer overflow
Title:	Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability
Summary:	Citrix Provisioning Services is prone to a buffer overflow vulnerability.
Description:	Summary: Citrix Provisioning Services is prone to a buffer overflow vulnerability. Vulnerability Insight: The SoapServer service improperly calculates a buffer index pointer value for a date and time string, which references a location outside the fixed sized heap buffer resulting in a heap buffer overflow. Vulnerability Impact: Successful exploitation could allow remote attackers to execute arbitrary code on the target system. Affected Software/OS: Citrix Provisioning Services version 5.6 and prior, 6.0 and 6.1 Solution: Apply the hotfix for Citrix Provisioning Services from the referenced advisory. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4068 http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979 http://osvdb.org/81664 http://www.securitytracker.com/id?1027004 XForce ISS Database: citrix-provisioning-server-code-execution(75311) https://exchange.xforce.ibmcloud.com/vulnerabilities/75311
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.