Citrix ADC NetScaler - Local File Inclusion (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler - Local File Inclusion Metasploit', 'Description' = % The remote device is affected by multiple vulnerabilities. An...

How to Create Custom Theme for Logon Page of NetScaler Gateway 10.1 and 10.5

This article describes how to create custom theme for logon page of NetScaler Gateway virtual server...

FAQ: Citrix Secure Hub for Mobile Devices and MicroVPN Technology

Citrix Endpoint Management, using technology formerly called XenMobile This article contains frequently asked questions about MicroVPN with XenMobile App or Enterprise editions and NetScaler Gateway deployments. Q: What are the recommended versions of components for MicroVPN? Q: What is MicroVPN?...

Radius Challenge Response Timeout Between NetScaler Gateway and Radius Server

When using two-factor challenge/response authentication through RADIUS, the NetScaler Gateway imposes a session timeout for the RADIUS challenge/response dialogue. In case of SMS token code delivery, there might be long delays between the challenge displayed to the user and the actual submission ...

Customize Logon Page for Each NetScaler Gateway Virtual Server and Redirect Users Based on Each FQDN

This article helps you customize a different logon page for each VPN virtual server hosted on NetScaler Gateway, and configure the NetScaler appliance to redirect users to the customized page based on the FQDN. Prerequisites The NetScaler Gateway must be licensed for the Responder feature to...

Error: "Socket Operation on Non-Socket" and "Error 1030" When Launching Apps and Desktop Through NetScaler Gateway

1030 error when launching apps and desktop through NetScaler Gateway. Error "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. Socket operation on non-socket" when launching apps through NetScaler Gateway...

How to Configure RDP Profile on NetScaler Gateway

...

Error: "Login exceeds maximum allowed users" on NetScaler Gateway

Users get the following error message when they try to log on through NetScaler Gateway: "Login exceeds maximum allowed users". Usually this issue appears after a firmware upgrade from NetScaler Gateway 9.x to NetScaler Gateway 10.5 and Universal Gateway License is allocated...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX281474)

The remote Citrix ADC or Citrix NetScaler Gateway device is version 11.1.x prior to 11.1-65.12, 12.1.x prior to 12.1-58.15 or 12.1-FIPS prior to 12.1-55.187 13.0.x prior to 13.0-64.35. It is, therefore, affected by multiple vulnerabilities: - A HTML injection vulnerability exists in Citrix ADC du...

CVE-2020-8245

Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP...

Code injection

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688) (Direct Check)

Binary data citrixCTX276688directcheck.nbin...

Registry Based EPA Scan on ADC to Look Active Device or Computer Name of Explicit

This article describes how to configure a registry-based EPA scan on NetScaler to look for the active device or computer name of an explicit workstation. Background When the user types the NetScaler Gateway web address, the NetScaler Gateway checks to see if there are any client-based security...

The vulnerability of the microprogramming software used in access control systems for the NetScaler Gateway virtual environment and the Citrix NetScaler Application Delivery Controller lies in the improper name restrictions on the path to the restricted directory. This allows attackers to gain access to published applications and carry out attacks from the Citrix server to other resources within the attacked company’s internal network.

The vulnerability of the microprogramming software used in access control systems for the NetScaler Gateway virtual environment, as well as the microprogramming software used in the Citrix NetScaler Application Delivery Controller, exists due to an incorrect limitation on the path name to the...

TLS handshake fails with any TLS LB VIP FIPS 9700 - Reset code 9811 from ADC

Cannot reach Netscaler Gateway Page FIPS Not able to form any TLS handshake with any LB VIP on ADC ADC sends REST with code :: 9811 Transmission Control Protocol, Src Port: 443, Dst Port: 62706, Seq: 4271, Ack: 860, Len: 0 Source Port: 443 Destination Port: 62706 Stream index: 0 TCP Segment Len: ...

Types of NetScaler and NetScaler Gateway Licenses

This article describes the types of licenses available for NetScaler and NetScaler Gateway appliances. NetScaler licenses are assigned to physical MPX and virtual VPX appliances. Logical SDX appliances require licenses for each physical appliance and each virtual instance. Refer to NetScaler...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...

How To Customize The Window Title Of Native Citrix Receiver Authentication Dialogs

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. All native Citrix Receiver authentication dialogs have title “Citrix Receiver” thus: This article...

Citrix Systems NetScaler Gateway and Citrix Application Delivery Controller Authorization Issues Vulnerability

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Application Delivery Controller ADC are products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to...

Authentication Bypass Vulnerability in the Management Interface of Citrix Application Delivery Controller and Citrix Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix Application Delivery Controller ADC formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, that, if exploited, could allow an attacker with access to the management...