CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability

Overview A TLS protocol vulnerability has been recently disclosed that could result in attackers being able to intercept and modify SSL/TLS encrypted traffic to servers that support Diffie-Hellman based export cipher suites. This vulnerability is known as 'LogJam' and has been assigned the...

Citrix XenServer QEMU FDC Buffer Overflow RCE (CTX201078) (VENOM)

The remote host is running a version of Citrix XenServer that is affected by a flaw in the Floppy Disk Controller FDC in the bundled QEMU software due to an overflow condition in hw/block/fdc.c when handling certain commands. An attacker, with access to an account on the guest operating system wi...

CVE-2015-2829

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service reboot via unspecified vectors...

Code injection

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service reboot via unspecified vectors...

CVE-2015-2829

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service reboot via unspecified vectors...

CVE-2015-2829

CVE-2015-2829 affects Citrix NetScaler ADC and NetScaler Gateway before 10.5 Build 53.9–55.8 and 10.5.e Build 53-9010.e, allowing a remote attacker to trigger a denial of service (reboot) via unspecified vectors. Connected sources confirm the affected product family and impact but do not provide ...

Citrix NetScaler Unauthorised Access Vulnerability (CTX200254)

Citrix NetScaler is prone to an unauthorised access vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix NetScaler DoS Vulnerability (CTX139017)

Citrix Netscaler is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix NetScaler Default Credentials (SSH)

The remote Citrix NetScaler system is using known default credentials for the SSH login. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Citrix NetScaler RCE Vulnerability (CTX200206)

Citrix NetScaler is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix NetScaler < 10.5 build 52.3nc Multiple Vulnerabilities

Citrix NetScaler VPX is prone to multiple cross-site scripting vulnerabilities and a cross-site request forgery CSRF vulnerability because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a...

Citrix NetScaler Default Credentials (HTTP)

The remote Citrix NetScaler system is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix NetScaler Detection Consolidation

Consolidation of Citrix Netscaler detections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Citrix NetScaler ADC/NetScaler Gateway Denial of Service Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. A security vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway that could allow an unauthenticated, remote attacker to...

Citrix XenServer Multiple Vulnerabilities (CTX200892)

The version of Citrix XenServer installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in the VGA emulator in QEMU that allows a local guest user to read host memory by setting the display to a high resolution. CVE-2014-3615 - A flaw exists in the setpixelformat...

Citrix XenServer Multiple Security Updates (CTX200892)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities could, if exploited, allow a malicious administrator of an HVM guest to compromise the host. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced...

MS15-0 3 4/CVE-2 0 1 5-1 6 3 5 HTTP remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-4/2 0 1 5 4 1 6 1 0 4 9 1 9 2 1 8. png Foreword In 4 month's patch day, Microsoft by marking“high-risk”MS15-0 3 4 patch fix HTTP. SYS a remote code Vulnerability, CVE-2 0 1 5-1 6 3 5 It. According to Microsoft Bulletinthe call, when the vulnerability exists in the HTTP...

IIS the latest high-risk Vulnerability, CVE-2 0 1 5-1 6 3 5, AND MS15-0 3 4 analysis-vulnerability warning-the black bar safety net

Foreword In 4 month's patch day, Microsoft by marking“high-risk”MS15-0 3 4 patch fix HTTP. SYS a remote code Vulnerability, CVE-2 0 1 5-1 6 3 5 It. According to Microsoft Bulletin https://technet.microsoft.com/en-us/library/security/MS15-034 the call, when the vulnerability exists in the HTTP...

Citrix NetScaler Citrix NetScaler AppFirewall Access Restriction Bypass Vulnerability

Citrix NetScaler is a network traffic management product. A security vulnerability in the Citrix NetScaler AppFirewall used by Citrix NetScaler allows an attacker to bypass firewall restrictions via a specially crafted Content-Type header...

Citrix NetScaler Nitro help/rt/large_search.html Cross-Site Scripting Vulnerability

Citrix NetScaler is a network traffic management product. A cross-site scripting vulnerability in Citrix NetScaler help/rt/largesearch.html allows an attacker to inject malicious script code via the searchQuery parameter...