Lucene search

[email protected]CVE-2011-2883

HistoryJul 21, 2011 - 11:55 p.m.

CVE-2011-2883

2011-07-2123:55:00

CWE-20

[email protected]

web.nvd.nist.gov

citrix

access gateway

vulnerability

dll

validation

cve-2011-2883

nsepa

activex

security

man-in-the-middle

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.3%

JSON

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.

CPENameOperatorVersion
citrix:access_gatewaycitrix access gatewayeq8.1
citrix:access_gatewaycitrix access gatewayeq9.0
citrix:access_gatewaycitrix access gatewayeq9.1

CPE	Name	Operator	Version
citrix:access_gateway	citrix access gateway	eq	8.1
citrix:access_gateway	citrix access gateway	eq	9.0
citrix:access_gateway	citrix access gateway	eq	9.1

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=928

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.3%

JSON

Related for CVE-2011-2883

prion1 cvelist1 nessus1