CVE-2015-5538

Citrix NetScaler ADC/NetScaler Gateway vuln (CVE-2015-5538) allows remote attackers to gain privileges via unknown vectors, affecting NetScaler ADC/Gateway versions prior to 10.1 Build 132.8, 10.5 prior to Build 57.7, and 10.5e prior to Build 56.1505.e. Descriptions consistently cite privilege es...

CVE-2015-6672

CVE-2015-6672 is a cross-site scripting (XSS) vulnerability in the Administrative Web Interface of Citrix NetScaler ADC and NetScaler Gateway. Affects versions prior to 10.1 Build 132.8, 10.5 prior to Build 57.7, and 10.5e prior to Build 56.1505.e. An attacker can remotely inject arbitrary web sc...

CVE-2015-5538

Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the 1 Command Line Interfa...

CVE-2015-5538: Undefined Security Weakness

Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the 1 Command Line Interfa...

CVE-2015-6672: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML...

XenMobile New Port Requirement for ADS Connectivity

Overview Citrix is making security enhancements to XenMobile in the form of certificate pinning. This feature includes a new Citrix Auto Discovery Service ADS access requirement that must be enabled in every customer environment whether you choose to use the certificate pinning feature or not. Wh...

PT-2015-3058

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions prior to 10.1 Build 132.8 Citrix NetScaler Application Delivery Controller ADC versions 10.5 prior to Build 57.7 Citrix NetScaler Gateway versions 10.5e prior to Build 56.1505.e...

PT-2015-7315

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions prior to 10.1 Build 132.8 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 prior to Build 57.7 Citrix NetScaler...

Citrix Provisioning Services Antivirus Best Practices

The environment may experience one or more of the following symptoms if the antivirus client is impacting either the Target Devices or PVS Servers. - Target Devices running the VDA software may appear power state unknown and no longer registered whenlooking at them via Studio or Director. -...

Vulnerability in Citrix XenServer Could Result in Information Disclosure (CTX201717)

A vulnerability has been identified in Citrix XenServer which could, if exploited, allow a malicious administrator of an HVM guest VM to obtain meta-data about their own VM. Citrix is presently unaware of any meta-data that might be leaked that would be of value to a malicious guest administrator...

Citrix XenServer QEMU RTL8139 Guest Network Device Information Disclosure (CTX201717)

The version of Citrix XenServer running on the remote host is affected by an information disclosure vulnerability due to improper validation of user-supplied input in the C+ mode offload emulation of the RTL8139 network card device model in QEMU. A remote attacker can exploit this to read process...

Citrix XenServer Security Update for CVE-2015-5154 (CTX201593)

A security vulnerability has been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

Citrix XenServer QEMU IDE Buffer Overflow Code Execution (CTX201593)

The version of Citrix XenServer running on the remote host is affected by a heap buffer overflow condition in the IDE subsystem of the bundled QEMU software, which is related to I/O buffer access when handling certain ATAPI commands. An attacker, with sufficient privileges in an HVM guest VM, can...

CVE-2015-5080

The Management Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter...

Code injection

The Management Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter...

CVE-2015-5080

The Management Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter...

CVE-2015-5080

The CVE-2015-5080 entry affects Citrix NetScaler ADC and NetScaler Gateway management interface. It enables remote authenticated users to run arbitrary shell commands by injecting shell metacharacters in the filter parameter to rapi/ipsec_logs, affecting 10.1 (<10.1.132.8), 10.5 (<56.15), a...

CVE-2015-5080: Improper Neutralization of Special Elements used in a Command

The Management Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter...

PT-2015-6771

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.1 before 10.1.132.8 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before Build 56.15 Citrix NetScaler Application...

Citrix NetScaler ADC and NetScaler Gateway Remote Arbitrary Shell Command Execution Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. A security vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway that allows authenticated users to send specially crafte...