327 matches found
CVE-2008-2528
CVE-2008-2528 affects Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier. The issue is an authentication bypass that could grant access to network resources; exact vectors are not disclosed. Impact is described as bypassing authentication with potent...
CVE-2008-2528
Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network resources" via unspecified vectors...
Input validation
The web portal interface in Citrix Access Gateway aka Citrix Advanced Access Control before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or...
CVE-2007-0011
The web portal interface in Citrix Access Gateway aka Citrix Advanced Access Control before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or...
CVE-2007-0011
The web portal interface in Citrix Access Gateway aka Citrix Advanced Access Control before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or...
CVE-2007-0011
The CVE-2007-0011 issue affects Citrix Access Gateway (also Citrix Advanced Access Control) prior to Advanced Edition 4.5 HF1. The vulnerability is that a session ID is placed in the URL during the web portal authentication flow, enabling context-dependent attackers to hijack a user session by re...
Citrix Access Gateway information leak
HTTP session cookie is passed through HTTP GET request parameters, making it possible to leak it value thorugh Referer: field or in the browsing history...
Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue
Note: This is a belated release to the mailing lists though most of the tracking services picked this up via the Citrix advisory... -- Corsaire Security Advisory -- Title: Citrix Access Gateway session ID disclosure issue Date: 05.09.06 Application: Citrix Advanced Access Control 4.0 Citrix...
Code injection
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
Buffer overflow
Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...
CVE-2007-4016
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...
Code injection
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4017
Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...
CVE-2007-4018
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
CVE-2007-4013
Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...
CVE-2007-4018
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
CVE-2007-4017
CVE-2007-4017 describes a CSRF vulnerability in the web-based administration console of Citrix Access Gateway prior to firmware 4.5.5. The issue allows remote attackers to perform certain configuration changes as administrators due to insufficient CSRF protections in the management interface. The...
CVE-2007-4016
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...