Citrix Presentation Server 4.5 Multiple Vulnerabilities

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple vulnerabilities : - The application can cause clients to use weaker encryption settings than configured by the administrator, which could allow attackers to bypass intended...

Citrix Presentation Server 4.5 Code Execution

The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple code execution vulnerabilities. By sending a specially crafted packet to the IMA server process, a remote, unauthenticated attacker could execute arbitrary code subject to the...

Citrix AGEE Logon Portal Unspecified XSS

The remote Citrix AGEE web management interface is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67200; scriptversion"1.13";...

Citrix Web Interface 5.x < 5.4 Unspecified XSS

The remote host contains a version of Citrix Web Interface 5.x earlier than 5.4.0. Such versions are reportedly affected by an as-yet unspecified cross-site scripting vulnerability. An attacker could exploit this issue to steal cookie-based authentication and launch other attacks. C Tenable Netwo...

Citrix NetScaler Web Management Interface Default Administrator Credentials

The remote Citrix NetScaler Web Management Interface uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default Password (nsroot) for 'nsroot' Account

The account 'nsroot' on the remote host has the password 'nsroot'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Citrix NetScaler appliances are known to use these credentials to provide complete, administrative access to the Citrix NetScaler...

CVE-2013-2767

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

CVE-2013-2767

CVE-2013-2767 affects Citrix NetScaler Access Gateway Enterprise Edition (AGEE) and NetScaler AGEE Common Criteria build configurations. The vulnerability allows remote attackers to bypass intranet access restrictions via unknown vectors; vulnerable if running AGEE before 9.3.62.4 (and 10.x up to...

CVE-2013-2767

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

Citrix NetScaler and Access Gateway Enterprise Edition unauthorized access to network resources vulnerability

Overview Citrix NetScaler and Access Gateway Enterprise Edition contain a vulnerability which could result in unauthorized access to network resources. Description Citrix NetScaler and Access Gateway Enterprise Edition contain a vulnerability which could allow a remote attacker to gain unauthoriz...

Citrix Access Gateway User Web Interface Detection

The remote web server hosts the web interface for using Citrix Access Gateway, an SSL VPN appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65951; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...

Citrix Access Gateway Administrative Web Interface Detection

The remote web server hosts the web interface for administering Citrix Access Gateway, an SSL VPN appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65949; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...

Citrix Access Gateway Administrative Web Interface Default Credentials

It is possible to log into the remote Citrix Access Gateway administrative web interface by providing default credentials. Knowing these, an attacker can gain administrative control of the affected application server and, for example, upload a new system image. %NASLMINLEVEL 70300 C Tenable Netwo...

Citrix Access Gateway 5.x < 5.0.4.223524 Unspecified Security Bypass

The version of Citrix Access Gateway hosted on the remote web server contains an unspecified security bypass vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid65952; scriptversion"1.7";...

Citrix Client Detection

Binary data 6725.prm...

CVE-2013-2263

Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors...

CVE-2013-2263

Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 is affected by an unspecified security bypass vulnerability that could allow remote attackers to access network resources via the login mechanism. The issue is described across multiple sources as an unspecified security bypass in C...

CVE-2013-2263

Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors...

USN-1767-1: Linux kernel vulnerabilities

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...