Please see http://sh0dan.org/oldfiles/hackingcitrix.html