5444 matches found
Code injection
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...
Code injection
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
CVE-2007-4017
Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...
CVE-2007-4016
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4018
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
Buffer overflow
Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...
CVE-2007-4013
Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...
CVE-2007-4017
CVE-2007-4017 describes a CSRF vulnerability in the web-based administration console of Citrix Access Gateway prior to firmware 4.5.5. The issue allows remote attackers to perform certain configuration changes as administrators due to insufficient CSRF protections in the management interface. The...
CVE-2007-4016
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors...
CVE-2007-4013
CVE-2007-4013 covers multiple unspecified vulnerabilities in Net6Helper.DLL (Net6Launcher Class, 4.5.2 and earlier) and in npCtxCAO.dll (Citrix Endpoint Analysis Client) in a Firefox plugin directory, plus a second npCtxCAO.dll (CAAOControl Object) in Citrix Access Gateway Standard Edition before...
CVE-2007-4018
The CVE concerns Citrix Access Gateway Advanced Edition prior to firmware 4.5.5. The vulnerability allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors. The Connected documents do not provide concrete exploit details, affected versions beyond ...
CVE-2007-4016
CVE-2007-4016 affects Citrix Access Gateway, specifically the client components in Standard Edition < 4.5.5 and Advanced Edition
CVE-2007-4013
Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...
CVE-2007-4018
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...
Design/Logic Flaw
The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...
CVE-2007-3679
The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...
CVE-2007-3679
CVE-2007-3679 affects the Citrix EPA ActiveX control (CCAOControl Object) in npCtxCAO.dll, used by Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1. The ActiveX control is vulnerable to remote code execution via arbitrary program download/execution on a clie...
CVE-2007-3679
The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...
SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-006 Advisory Title: Citrix EPA ActiveX Control Design Flaw Author: Michael White / [email protected] Release Date: 19-07-2007 Applicatio...