RE: Citrix vulnerability disclosure/bug reports contact

From: Arian J. Evans (arian.evans@bigfoot.com)
Date: 03/21/02 

From: "Arian J. Evans" <arian.evans@bigfoot.com>
To: "'Eric Budke'" <budke@budke.com>
Date: Wed, 20 Mar 2002 19:21:48 -0600

> Does anyone know where to send citrix bug reports?

Citrix prefers official support to go through either
a channel reseller (CCA/CCEA's at VARs can open calls),
or direct calls from someone with a support contract.

support@ and security@ are valid email addresses at
Citrix, but seldom responded to IME.

For general issues/bug reports, Citrix will direct you
to their public support forum:

http://ctxex10.citrix.com/icaforum.nsf/($All)?OpenView

<*personal experiences w/Citrix*>

I ran into several security quirks regarding application
authentication issues while beta-testing nFuse, and had
no luck getting Citrix support to address them, other
than open a case and never respond. FWIW, I was at a Citrix
VAR at that time and had direct support, and still made
no difference. I have not used nFuse since it went 1.0,
so I can provide no further input.

You can contact their support directly at: 800-424-8749
if you wish to pursue further; YMMV.

I called Citrix support directly on this tonight and
could find no one who had an answer on what to do with
a vulnerability disclosure, other than posting it in
their public forums. I got transferred until disconnected,
called back, and was then put on hold for over 30 mins
until I hung up. That's all the effort I'm willing to
put out for them. Good luck; responsible reporting.

Arian J. Evans
Citrix CCA Winframe, Metaframe
and other sheepskins

 

Relevant Pages

  • RE: Citrix "The Page cannot be displayed"
    ... ASP.NET web page(with iframe) in Citrix environment, ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Clients with Dual Monitors: Extended Desktops
    ... Does Citrix offer evaluations? ... > Unfortunately a RDP session does not support multiple monitors. ... >> is untested by the vendor and they are just covering themselves. ...
    (microsoft.public.windows.terminal_services)
  • Re: TS Farm
    ... It's not supported on Citrix by the support company - I'm sure the ... see one IP Addres regardless of how many servers I have I assume? ... "Jeff Pitsch" wrote: ... > I'm actually surprised the software isn't supported on Citrix since Citrix ...
    (microsoft.public.windows.terminal_services)
  • Re: Clients with Dual Monitors: Extended Desktops
    ... I was just wondering if adding Citrix to native TS could cause ... Unfortunately a RDP session does not support multiple monitors. ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Report from Crawford: A Real American speaks
    ... A Report from the Vigil in Crawford. ... Cindy Sheehan's trip to Crawford to talk to President Bush started out as ... filled with vets and others who had come to support us. ... the mainstream media that hardly reports on these ...
    (alt.politics)