Design/Logic Flaw

The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...

CVE-2007-3679

The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...

CVE-2007-3679

CVE-2007-3679 affects the Citrix EPA ActiveX control (CCAOControl Object) in npCtxCAO.dll, used by Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1. The ActiveX control is vulnerable to remote code execution via arbitrary program download/execution on a clie...

SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-006 Advisory Title: Citrix EPA ActiveX Control Design Flaw Author: Michael White / [email protected] Release Date: 19-07-2007 Applicatio...

Bypass Windows Rootkit detection systems-vulnerability warning-the black bar safety net

Introduction PatchFinder is a design very cleverprocedure, based on EPAexecution path analysistechniques are used to detect the intrusion of kernel Rootkits. Appendix 1 and 2 allows you to understand how it works. This article will provide a bypass of the EPA method. Method The EPA Intel-based...