CVE-2014-2882

CVE-2014-2882 affects Citrix NetScaler management GUI; the SSL context assigns an empty trust manager, causing certificate validation to be bypassed and any certificate to be accepted. Affected versions are NetScaler ADC/Gateway prior to 9.3-66.5 and 10.x prior to 10.1-122.17. Affected via the ma...

CVE-2014-2881

The CVE-2014-2881 issue affects Citrix NetScaler devices (ADC and NetScaler Gateway) where the Diffie-Hellman key exchange in the management GUI Java applet uses a weak RNG. The root cause is use of java.util.Random to generate secret values, with known predictors and small seed sizes (32/48 bits...

CVE-2014-2882

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

CVE-2014-2881

Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unknown impact and vectors...

Citrix NetScaler Application Delivery Controller Multiple Vulnerabilities

The remote Citrix NetScaler version is affected by multiple vulnerabilities : - A denial of service vulnerability in the VM Virtual Machine Daemon. Please note that this particular vulnerability does not apply to Citrix NetScaler 10.1. CVE-2013-6938 - A denial of service vulnerability in the...

Citrix NetScaler应用交付控制器跨站LDAP注入漏洞(CVE-2013-6943)

BUGTRAQ ID: 66043 CVECAN ID: CVE-2013-6943 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞造成SSH和Web管理用户名内的LDAP注入。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler...

Citrix NetScaler应用交付控制器本地信息泄露漏洞(CVE-2013-6940)

BUGTRAQ ID: 66020 CVECAN ID: CVE-2013-6940 Citrix NetScaler是一款网络流量管理产品。 Citrix NetScaler SDX 10.0及9.3版本的应用支付控制器在实现上存在安全漏洞，攻击者可利用此漏洞将用户凭证记录到磁盘，导致信息泄露。 0 Citrix NetScaler SDX 9.x Citrix NetScaler SDX 10.x 厂商补丁： Citrix ------ Citrix已经为此发布了一个安全公告（CTX139049）以及相应补丁: CTX139049：Citrix NetScaler Applicati...

CVE-2013-6942

Cross-site request forgery CSRF vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6939

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

CVE-2013-6941

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors...

CVE-2013-6944

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2013-6943

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames...

CVE-2013-6940

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors...

CVE-2013-6938

Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors,...

Design/Logic Flaw

Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors,...

Design/Logic Flaw

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors...

Information disclosure

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors...

Authentication flaw

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...