CVE-2017-7219

A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors...

Heap overflow

A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows a remote authenticated attacker to run arbitrary commands via unspecified vectors...

CVE-2017-7219

CVE-2017-7219 is a heap overflow in Citrix NetScaler Gateway that allows a remote authenticated attacker to execute arbitrary commands. Affected products are Citrix NetScaler Gateway versions: 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13. The vulnerability...

CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

Description of Problem A heap overflow vulnerability has been identified in Citrix NetScaler Gateway that could allow a remote, authenticated user to execute arbitrary commands on the NetScaler Gateway appliance as a root user. The following vulnerability has been addressed: CVE-2017-7219 High:...

Change of Expired LDAP Password on NetScaler During Log On Fails Intermittently

Changing the expired LDAP password at the time of user login via NetScaler Gateway due to password-expiry may fail and demonstrate itself on the login page as: "Incorrect credentials. Try again." or "Cannot connect. Try connecting again." ifEnhanced Authentication Feedback is enabled: At the time...

How to configure Google Chrome for Citrix WebHelper invoked mode

Citrix WebHelper for Google chrome can work as invoked mode or Non-invoked mode toaccess XenApp/XenDesktop resource. The article describes configuration steps for Citrix WebHelper invoked mode. It is essential to have access to back-end application via NetScaler Gateway when Receiver Client...

Application launch results in White screen Through NetScaler Gateway using Windows Receiver 8.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Receiving the ICA File and Clicking on Application Results in White Screen...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Domain Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for domain check...

How to Configure HDX Enlightened Data Transport Protocol

Adaptive transport for XenApp and XenDesktop optimizes data transport by leveraging a new Citrix protocol called Enlightened Data Transport EDT in preference to TCP whenever possible. Compared to TCP and UDP, EDT delivers a superior user experience on challenging long-haul WAN and Internet...

How to Configure NetScaler Gateway EPA Scans to Detect Receiver on Clients

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway EPA scans to detect clients without Receiv...

CVE-2017-5933

CVE-2017-5933 affects Citrix NetScaler ADC and NetScaler Gateway. Affected: NetScaler ADC/Gateway 10.5 before Build 65.11; 11.0 before Build 69.12/69.123; 11.1 before Build 51.21. Issue: random GCM nonces enabling marginally easier nonce reuse attacks that could let remote attackers obtain the GC...

StoreFront Management Console Reverts NetScaler Gateway Authentication Type to "Domain"

When editing Authentication Settings in MMC under NetScaler Gateway applicance, the Auth type is reverted to Domain. For instance, if we select Smartcard then apply the changes and reopen the console, the authtype would appear as "Domain". However, the configuration file will make the changes. On...

How to Configure NetScaler Gateway and Microsoft Intune (MDM) for Single Factor Authentication

Background The integration of Microsoft Intune with NetScaler Gateway provides best-of-class application access and data protection solution offered by Citrix NetScaler Gateway and Intune. You get the most complete suite of secure productivity apps, including: email calendar contacts note-taking...

Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file

Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

The following error occurred during an authentication attempt for user:domain.com\abc with realm: <unknown>

Getting error "Cannot complete your request" when accessing the website through Netscaler Gateway. Bypassing the Netscaler Gateway website works fine. Event ID:2 "The following error occurred during an authentication attempt for user:domain.com\abc with realm: "...

"Attach a smart card reader and insert your smart card to log on" When no Smart Card Authentication Present

When using Citrix Receiver to connect to the NetScaler Gateway, StoreFront users get "Attach a smart card reader and insert your smart card to log on" however smart authentication is not configured...

NetScaler Gateway: Could not add account. Check your account settings and try again.

When accessing the Store externally we would get the error Could not add account. Check your account settings and try again. If we access the Storefront Base URL, we are able to enumerate the applications and desktops just fine...

NetScaler Gateway EPA Scan Fails When Checking for "Windows Update" on Client Machine

When NetScaler Gateway EPA scan is configured to validate if the Windows update on client machine has been performed within X days, the scan fails on client machine...

How to Limit One Session Per User on NetScaler Gateway?

This article describes how to limit one session per user on NetScaler Gateway. Use case An administrator wants to ensure that at any point in time a given user can only have one active session with NetScaler Gateway. Administrators can use a session policy or the global NetScaler Gateway settings...