Lucene search

PRIOn knowledge basePRION:CVE-2010-4566

HistoryJan 14, 2011 - 11:00 p.m.

Authentication flaw

2011-01-1423:00:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.086 Low

EPSS

Percentile

94.3%

JSON

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.

CPENameOperatorVersion
access_gatewayeq8.0 m48.7-enterprise
access_gatewayeq.8.0 m50.3-enterprise
access_gatewayeq8.1-69.4 enterprise
access_gatewayeq8.0 m49.2-enterprise
access_gatewayeq8.0 m59.1-enterprise
access_gatewayeq9.0.71.3 enterprise
access_gatewayeq9.1-104.5 enterprise
access_gatewayeq<= 9.2-49.8
access_gatewayeq4.5.7 standard
access_gatewayeq4.6.2 standard

Name	Operator	Version
access_gateway	eq	8.0 m48.7-enterprise
access_gateway	eq	.8.0 m50.3-enterprise
access_gateway	eq	8.1-69.4 enterprise
access_gateway	eq	8.0 m49.2-enterprise
access_gateway	eq	8.0 m59.1-enterprise
access_gateway	eq	9.0.71.3 enterprise
access_gateway	eq	9.1-104.5 enterprise
access_gateway	eq	<= 9.2-49.8
access_gateway	eq	4.5.7 standard
access_gateway	eq	4.6.2 standard

Rows per page:

1-10 of 181

References

securityreason.com/securityalert/8119

support.citrix.com/article/CTX127613

www.osvdb.org/70099

www.securitytracker.com/id?1024893

www.vsecurity.com/resources/advisory/20101221-1

www.exploit-db.com/exploits/16916

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.086 Low

EPSS

Percentile

94.3%

JSON

Related for PRION:CVE-2010-4566