6255 matches found
Code injection
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...
Immunity Canvas: CITRIX_NETSCALER_SOAP
Name| citrixnetscalersoap ---|--- CVE| CVE-2014-7140 Exploit Pack| CANVAS Description| Citrix Netscaler 10.1 Soap exploit Notes| FoundBy: Console Cowboys Notes: A vulnerability exists in the SOAP handler of the web interface. A SOAP request can be crafted to trigger a memory corruption flaw,...
CVE-2014-7140
CVE-2014-7140 affects Citrix NetScaler ADC/Gateway 10.x (before 10.1-129.11 and 10.5 before 10.5-50.10). The vulnerability is an unspecified remote code execution via the management interface, with a CVSSv2 base score of 7.5 (HIGH). The root cause and exact exploit vectors are not detailed in the...
CVE-2014-7140
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2014-7140: Undefined Security Weakness
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.x before 10.1-129.11 and 10.5 before 10.5-50.10 allows remote attackers to execute arbitrary code via unknown vectors...
PT-2014-7801
Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.0 through 10.1-129.10 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5-50.10 Description The issue is...
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
Description of Problem The recently disclosed protocol flaw in SSLv3, referred to as CVE-2014-3566 or POODLE, could expose some deployments that support SSLv3 to a risk of an active Man in the Middle MITM attack. A successful attack could lead to the disclosure of the information that is being se...
Citrix NetScaler SOAP Handler Remote Code Execution
This module exploits a memory corruption vulnerability on the Citrix NetScaler Appliance. The vulnerability exists in the SOAP handler, accessible through the web interface. A malicious SOAP requests can force the handler to connect to a malicious NetScaler config server. This malicious config...
CVE-2011-2593
Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...
Integer overflow
Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...
CVE-2011-2593
Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...
CVE-2011-2593
CVE-2011-2593 affects the Citrix Access Gateway Plug-in for Windows (nsepacom ActiveX control, nsepa.exe) StartEpa method. An integer overflow can be triggered by a crafted Content-Length HTTP header, leading to a heap-based buffer overflow and remote code execution. Affected versions are Citrix ...
PT-2014-2126
Name of the Vulnerable Software and Affected Versions Citrix Access Gateway Enterprise Edition Plug-in for Windows versions 9.x before 9.3-57.5 Citrix Access Gateway Enterprise Edition Plug-in for Windows versions 10.0 before 10.0-69.4 Description The issue is related to an integer overflow in th...
CVE-2011-2593: Undefined Security Weakness
Integer overflow in the StartEpa method in the nsepacom ActiveX control nsepa.exe in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which trigger...
Citrix NetScaler Multiple Vulnerabilities (CTX140863)
The remote Citrix NetScaler version is affected by multiple vulnerabilities : - A reflected cross-site-scripting in the administration user interface. CVE-2014-4346 - A cookie information disclosure vulnerability. CVE-2014-4347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Citrix XenServer Detection
Binary data citrixxenserverversion.nbin...
Citrix XenServer Multiple Vulnerabilities (CTX140984)
The remote host is running a version of Citrix XenServer that is affected by multiple vulnerabilities : - An information disclosure exists due to the Xen hypervisor's failure to properly clean memory pages. CVE-2014-4021 - An unspecified vulnerability exists due to a buffer overflow in the HVM...
CVE-2014-4948
Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...