Lucene search

MitreCVE-2007-3679

HistoryJul 25, 2007 - 5:30 p.m.

CVE-2007-3679

2007-07-2517:30:00

mitre

web.nvd.nist.gov

citrix

epa

activex

control

remote code execution

cve-2007-3679

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.01

Percentile

83.8%

JSON

The Citrix EPA ActiveX control (aka the “endpoint checking control” or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system.

Affected configurations

Nvd

Node

citrixaccess_gatewayRange≤4.5hf1advanced

citrixaccess_gatewayRange≤4.5.5standard

VendorProductVersionCPE
citrixaccess_gateway*cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*
citrixaccess_gateway*cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	access_gateway	*	cpe:2.3:a:citrix:access_gateway::hf1:advanced:::::
citrix	access_gateway	*	cpe:2.3:a:citrix:access_gateway:::standard:::::*

References

osvdb.org/37845

secunia.com/advisories/26143

securityreason.com/securityalert/2916

support.citrix.com/article/CTX113815

support.citrix.com/article/CTX114028

www.securityfocus.com/archive/1/474204/100/0/threaded

www.securityfocus.com/bid/24865

www.securityfocus.com/bid/24975

www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt

www.vupen.com/english/advisories/2007/2583

exchange.xforce.ibmcloud.com/vulnerabilities/35511

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.01

Percentile

83.8%

JSON

Related for CVE-2007-3679