Penetration Testing: Re: [PEN-TEST] Citrix

["Beauregard, Claude Q" <CQBeauregard () AAAMICHIGAN COM>]

I consider a hole any function of the firewall that opens a port to provide
direct access to an internal network resource in this a case a Citrix
server.

-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of van der Kooij, Hugo
Sent: Monday, October 09, 2000 2:18 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] Citrix


On Mon, 9 Oct 2000, Beauregard, Claude Q wrote:

> Has anyone done any penetration regarding Citrix and Internet access as
> provided by the Citrix servers to internal network resources. Even though
> they are now using 128bit encryption for the client the hole in the
firewall
> is there waiting to be exploited.
Can you elaborate what you see as a hole?

Hugo.

--
Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
hvdkooij () caiw nl     http://home.kabelfoon.nl/~hvdkooij/
--------------------------------------------------------------
Quoting this tagline is illegal! (http://www.dtcc.edu/cs/rfc1855.html)