module

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

Disclosed
Nov 4, 2011
Created
May 30, 2018

Description

This module exploits a remote buffer overflow in the Citrix Provisioning Services
5.6 SP1 (without Hotfix CPVS56SP1E043) by sending a malformed packet with the opcode
0x40020006 (GetObjetsRequest) to the 6905/UDP port. The module, which allows code execution
under the context of SYSTEM, has been successfully tested on Windows Server 2003 SP2
and Windows XP SP3.

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use exploit/windows/misc/citrix_streamprocess_get_objects
msf exploit(citrix_streamprocess_get_objects) > show targets
...targets...
msf exploit(citrix_streamprocess_get_objects) > set TARGET < target-id >
msf exploit(citrix_streamprocess_get_objects) > show options
...show and set options...
msf exploit(citrix_streamprocess_get_objects) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.