CVE-2005-3652 - Vulnerability Details - OpenCVE

Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Citrix	Ica Program Neighborhood Client

Configuration 1 [-]

cpe:2.3:a:citrix:ica_program_neighborhood_client:9.1:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/18068
http://securityreason.com/securityalert/266
http://securitytracker.com/id?1015373
http://support.citrix.com/kb/entry.jspa?externalID=CTX108354
http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities
http://www.osvdb.org/21816
http://www.securityfocus.com/bid/15907
http://www.vupen.com/english/advisories/2005/2944

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-16T23:00:00

Updated: 2024-08-07T23:17:23.608Z

Reserved: 2005-11-18T00:00:00

Link: CVE-2005-3652

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-12-16T23:03:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-3652

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-12-16T00:00:00", "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2006-01-04T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1015373", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015373"}, {"name": "20051216 Citrix Program Neighborhood Name Heap Corruption Vulnerability", "tags": ["third-party-advisory", "x_refsource_IDEFENSE"], "url": "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities"}, {"name": "18068", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18068"}, {"name": "15907", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15907"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354"}, {"name": "266", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/266"}, {"name": "21816", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21816"}, {"name": "ADV-2005-2944", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2944"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3652", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1015373", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015373"}, {"name": "20051216 Citrix Program Neighborhood Name Heap Corruption Vulnerability", "refsource": "IDEFENSE", "url": "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities"}, {"name": "18068", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18068"}, {"name": "15907", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15907"}, {"name": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354", "refsource": "CONFIRM", "url": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354"}, {"name": "266", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/266"}, {"name": "21816", "refsource": "OSVDB", "url": "http://www.osvdb.org/21816"}, {"name": "ADV-2005-2944", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2944"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:23.608Z"}, "title": "CVE Program Container", "references": [{"name": "1015373", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015373"}, {"name": "20051216 Citrix Program Neighborhood Name Heap Corruption Vulnerability", "tags": ["third-party-advisory", "x_refsource_IDEFENSE", "x_transferred"], "url": "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities"}, {"name": "18068", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18068"}, {"name": "15907", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15907"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354"}, {"name": "266", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/266"}, {"name": "21816", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21816"}, {"name": "ADV-2005-2944", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2944"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3652", "datePublished": "2005-12-16T23:00:00", "dateReserved": "2005-11-18T00:00:00", "dateUpdated": "2024-08-07T23:17:23.608Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:citrix:ica_program_neighborhood_client:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "52F72C59-703A-44C4-B725-B74FC047AE21", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a long name value in an Application Set response."}], "id": "CVE-2005-3652", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-16T23:03:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18068"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/266"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015373"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21816"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/15907"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2944"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18068"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/266"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015373"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.citrix.com/kb/entry.jspa?externalID=CTX108354"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.idefense.com/application/poi/display?id=357&type=vulnerabilities"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/21816"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/15907"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2944"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}