FYI...

Citrix vuln - update available
- http://secunia.com/advisories/28508/
Last Update: 2008-01-18
Critical: Moderately critical
Impact: System access
Where: From local network
Solution Status: Vendor Patch
Software: Citrix Access Essentials 1.x, Citrix Access Essentials 2.x, Citrix Desktop Server 1.x. Citrix MetaFrame Presentation Server 3.x, Citrix Presentation Server 4.x
...Successful exploitation allows execution of arbitrary code.
Solution: Apply hotfix (see vendor advisory for details).
Original Advisory: CTX114487:
http://support.citrix.com/article/CTX114487
Jan 15, 2008 - "...A hotfix has been released to address both of these issues. Citrix recommends that affected customers install the hotfix..."

- http://isc.sans.org/diary.html?storyid=3862
Last Updated: 2008-01-18 08:22:17 UTC

- http://www.zerodayinitiative.com/advisories/ZDI-08-002.html
January 17, 2008