|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Useless services >> Check for a Citrix server Vulnerability Assessment Details
|
Check for a Citrix server |
||
CITRIX check Detailed Explanation for this Vulnerability Assessment A Citrix server is running on this machine. Citrix servers permit a Windows user to remotely obtain a graphical login (and therefore act as a local user on the remote host). NOTE: by default the Citrix Server application utilizes a weak 40 bit obfuscation algorithm (not even a true encryption). If the default settings have not been changed, there already exists tools which can be used to passively ferret userIDs and passwords as they traverse a network. If this server is located within your DMZ, the risk is substantially higher, as Citrix necessarily requires access into the internal network for applications like SMB browsing, file sharing, email synchronization, etc. If a possible hacker gains a valid login and password, he may be able to use this service to gain further access on the remote host or remote network. This protocol has also been shown to be vulnerable to a man-in-the-middle attack. Solution: Disable this service if you do not use it. Also, make sure that the server is configured to utilize strong encryption. Network Security Threat Level: Low Networks Security ID: 7276 Vulnerability Assessment Copyright: This script is Copyright (C) 2002 John Lampe...j_lampe@bellsouth.net |
||
Cables, Connectors |
HP Microserver N54L, 2.2GHz, 8GB, SATA DVD-ROM
$142.50
$100.00
Supermicro 2U 6028R-E1CR24N 24x LFF- Wholesale Build Your Own Storage Server
$249.99
Supermicro 502-2 Server 5015-EHF-D525 Intel Atom D525 1.80GHz 2GB RAM 320GB HDD
$53.99
HPE ProLiant MicroServer Gen10 AMD Opteron X3216 1.6GHz CPU 8GB RAM *No HDD*
$249.99
HPE ProLiant MicroServer Gen11 Ultra Micro Tower Server - 1 Xeon E-2414 2.60 GHz
$1008.91
SuperMicro Server 505-2 Intel Atom 2.4GHz 8GB 2X4GB RAM 5018A-FTN4 REV2 PF Sense
$149.99
HPE ProLiant MicroServer Gen10 Plus v2 Ultra Micro Tower Server - 1 x Intel Xeon
$726.99
Supermicro 1U Server X10DRG-HT 2x E5-2680 v3 64GB 4x Trays 3x GPU AI Crypto
$319.99
SuperMicro X11DPT-B -NA011 Dual LGA-3647 DDR4 Blade Server, DUAL XEON GOLD 6138
$179.97
|
||
No Discussions have been posted on this vulnerability. |