The Inquirer-Home

Citrix leaves gaping holes in web sites

US government, military sites vulnerable, bloke reckons
Tue Oct 09 2007, 15:31

CITRIX SERVERS running US government and military websites are full of security holes, says a security researcher quoted in a story at Eweek.

Petko Petkov writes that his recent testing of Citrix gateways found "tons" of vulnerable instances, including 10 in US government domains and four in US military domains.

The basic problem, apparently, is that Citrix services that once started out on secure LANs ended up over time using routable protocols on Internet facing servers that weren't properly firewalled.

Anyone with Citrix client software or hacking tools can access formerly secure internal services that are now wide open to the Internet.

More here. µ

Share this:

Comments
Making Available...

Hmmm "Making Available...."

Go get em...

I'm sure you find a song there somewhere.

"Cases such as this remind us strong enforcement is a significant part of the effort to eliminate piracy, and that we have an effective legal system in the U.S. that enables rights holders to protect their intellectual property."

posted by : Pete, 09 October 2007 Complain about this comment
aboutus
Advertisement
Subscribe to INQ newsletters
Advertisement
INQ Poll

Authorities in several countries raided Megaupload recently, shut down all of its services, seized hundreds of servers and arrested several of its executives on criminal charges.

Do you think the move was justified?