This host is installed with Citrix Provisioning Services and is prone to buffer overflow vulnerability.

Successful exploitation could allow remote attackers to execute arbitrary code on the target system. Impact Level: Application/System

Apply the hotfix for Citrix Provisioning Services, For updates refer to http://support.citrix.com/article/ctx133039

The SoapServer service improperly calculates a buffer index pointer value for a date and time string, which references a location outside the fixed sized heap buffer resulting in a heap buffer overflow.

Citrix Provisioning Services version 5.6 and prior, 6.0 and 6.1

• http://secunia.com/advisories/48971/
• http://support.citrix.com/article/ctx133039
• http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=979

---

Updated on 2015-03-25