RE: breakout of citrix

From: Rob Wallace (Robert.Wallace_at_thompsonhealth.org)
Date: 10/21/04

  • Next message: Stephane Auger: "Mcafee Intrushield Reviews" 
    Date: Thu, 21 Oct 2004 14:09:10 -0400
To: "Martin Mewes" <mm@mewes.tv>, <security-basics@securityfocus.com>

    To all,

    I've had this same problem at my old job and I'm not sure how to fix it. What Kenzo is getting at though is if you, for example, do a file -> open within word, excel, etc. right click within the file-open window and left click on explore you'll get a desktop of the server. Essentially the same thing is happening for him.

    If anyone knows how to fix it, please post.

    Thank you,
    Rob Wallace

    -----Original Message-----
    From: Martin Mewes [mailto:mm@mewes.tv]
    Sent: Thursday, October 21, 2004 12:41 PM
    To: security-basics@securityfocus.com
    Subject: Re: breakout of citrix

    Hi,

    Kenzo wrote:

    > I discovered that if you insert a link into the work document such as "c:\"
    > and click on it.
    > Citrix freaks out, then gives you the desktop of the citrix server.
    >>From there you can do access what ever programs you want.

    Be verbose, please ...

    I added a link within Word2000 using STRG+K pointing to C:\

    What I get on screen is ...

    \\Client\C$\

    When I click on this it connects me properly to my client.

    I remember that during or after installing Citrix Metaframe XP1 with
    Service Release 2 the program offered me to run a (huh, long ago)
    program which changes the Server-Drive C:\ and D:\ to L:\ and M:\ in
    order to avoid some stuff.

    Most of the clients which connect have their client drives at C:\ and/or
    D:\.

    Citrix says, if you do not have this program run, the local harddrives
    of a client could not be connected to a Citrix-Session, if the client is
    a Windows-Machine.

    hth

    bis dahin - kind regards

    Martin Mewes 

    -- 
######################################################################
http://www.webmin.com/	| Webbased Administration Tool for
http://webmin.mamemu.de/| Unixoid Systems :-)
Official Webmin/Usermin Translation Co-Ordinator 2003/2004
######################################################################
  • Next message: Stephane Auger: "Mcafee Intrushield Reviews"

    Relevant Pages

    • Kikkert Security Advisory: Potentially serious security flaw in Citrix Client
      ... consideration and after advising 'Citrix' first. ... affected as I have no longer access to a Citrix server to do this myself... ... Serious security flaw in Citrix Client ...
      (Bugtraq)
    • Re: SMS over port 80
      ... Somehow your managers were told by Microsoft that something was possible, ... Citrix proprietary protocol instead of RDP. ... Citrix client isn't really in the picture. ... > for SP1 for workgroup support and use VPN). ...
      (microsoft.public.sms.admin)
    • Re: Secure Access - [WP]
      ... How can I confiugre/make sure they only logon to the Citrix Server. ... users are in a different company and I don't know what client OS they are ...
      (microsoft.public.windows.server.active_directory)
    • Citrix Metaframe Presentation Server bypassing policies
      ... Vulnerability in Presentation Server allow to user bypass citrix policy ... Citrix Presentation Server policy is used for admins to restrict the user ... IP client, servers, Users, o Client Name. ...
      (Pen-Test)
    • Re: SMS over port 80
      ... We did discover that using Citrix or Terminal server client will not work ... I feel that this would be a great feauture to have in SMS 2003 and I bet others ... > Somehow your managers were told by Microsoft that something was possible, ...
      (microsoft.public.sms.admin)