CVE-2006-5861: Medium severity Citrix Metaframe vulnerability
The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service (service exit) via a crafted packet that causes the service to access an unmapped memory address and triggers an unhandled exception.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5861?
CVE-2006-5861 has been classified with a high severity, as it allows for remote denial of service attacks.
How do I fix CVE-2006-5861?
To mitigate CVE-2006-5861, upgrade to the latest version of Citrix MetaFrame XP or Presentation Server as provided by Citrix.
What software is affected by CVE-2006-5861?
CVE-2006-5861 affects Citrix MetaFrame XP versions 1.0 and 2.0, and Citrix Presentation Server versions 3.0 and 4.0.
What attack vector does CVE-2006-5861 use?
CVE-2006-5861 can be exploited via a crafted packet sent to the IMA service to trigger a denial of service.
Is CVE-2006-5861 being actively exploited?
While specific exploitation details vary, CVE-2006-5861 poses a risk that can be abused if the vulnerable Citrix services are not updated or secured.