CVE-2017-5933

CVE-2017-5933 affects Citrix NetScaler ADC and NetScaler Gateway. Affected: NetScaler ADC/Gateway 10.5 before Build 65.11; 11.0 before Build 69.12/69.123; 11.1 before Build 51.21. Issue: random GCM nonces enabling marginally easier nonce reuse attacks that could let remote attackers obtain the GC...

Citrix NetScaler Nonce Generation Vulnerability (CTX220329)

A flaw has been identified in the GCM nonce generation functionality of Citrix NetScaler application Delivery Controller ADC and Citrix NetScaler Gateway that could result in the interception of session data. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from...

Citrix ADC Gateway EPA Scans Deny Access Randomly With Error Code 12029

Citrix ADC Gateway EPA scans deny access randomly with error code 12029...

Citrix NetScaler ADC URL Redirection Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery. A URL redirection vulnerability exists in Citrix NetScaler ADC. An attacker could exploit this vulnerability to allow users to access the attacker's malicious links without notice...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

Design/Logic Flaw

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

The CVE-2016-9028 issue affects Citrix NetScaler ADC (various 10.x/11.x builds) and enables an unauthenticated, remote attacker to steal session cookies by manipulating the Host header in an unauthorized redirect flow. Affected versions include 10.1 <135.8, 10.5 <61.11, 11.0 <65.31/65.35...

Citrix NetScaler ADC Unauthorized Redirect Vulnerability (CTX218361)

An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC that could allow a remote attacker to obtain session cookies of a redirected AAA user. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

How to connect to ADFS 3.0 from NetScaler ADC load balancer?

Use Case Use case 1 : Microsoft Active Directory Federation Services ADFS 3.0 which provides single sign-onaccess to enterprise applications, requires server name in client hello extension to identify theapplication to connect to. Use case 2 : Connect to a server with multiple applications runnin...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/thermal/qpnp-adc-tm.c file in Qualcomm’s Android operating system is related to a format string vulnerability. Exploiting this vulnerability could allow an attacker, operating remotely, to enhance their privileges through a specially created application that...

Android on Nexus Qualcomm Component Formatting String Vulnerability

Android on Nexus 5 is an open source Linux-based operating system for the Nexus 5 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

How to Use Listen Policy to Create Virtual Servers with Same IP and Perform Selective Dual Authentication

You can use the Listen Policy feature of Citrix ADC NetScaler to use the same IP and FQDN and have selective authentication on the basis of the IP range. Example : Single authentication for internal users and dual authentication for external users...

How to forward client IP to back-end server using "x-forwarded-for" header on Citrix ADC

To forwardClient IP to Back-End Server Using "x-forwarded-for" Header...

How Do I Set Up RSA Keys/Public SSL Certificate on Citrix ADC

...

Default configuration

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5....

CVE-2015-8154

The SysPlant.sys driver in the Application and Device Control ADC component in the client in Symantec Endpoint Protection SEP 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."...

Hardcoded credentials

The SysPlant.sys driver in the Application and Device Control ADC component in the client in Symantec Endpoint Protection SEP 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."...