Code injection

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames...

CVE-2013-6939

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication."...

CVE-2013-6943

Citrix NetScaler ADC is affected by LDAP injection (CVE-2013-6943) in the management paths. Affects ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7. The vulnerability allows remote attackers to inject LDAP queries via SSH and Web management usernames. Remediation is a...

CVE-2013-6940

CVE-2013-6940 affects Citrix NetScaler ADC versions 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7, where user credentials are logged, enabling potential sensitive information disclosure via unspecified vectors. Connected sources corroborate the vulnerability as an infor...

CVE-2013-6942

Cross-site request forgery CSRF vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6941

Affected product: Citrix NetScaler Application Delivery Controller (ADC). Vulnerability (CVE-2013-6941): Unspecified shell breakout in the ADC firmware via unknown vectors. Versions affected (as stated): 9.3.x before 9.3-64.4; 10.0 before 10.0-77.5; 10.1 before 10.1-118.7. Impact (as described): ...

CVE-2013-6944

CVE-2013-6944 is a cross-site scripting (XSS) vulnerability in the AAA TM vServer user interface of Citrix NetScaler ADC. Affected software includes Citrix NetScaler ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7, where remote attackers can inject arbitrary web scrip...

CVE-2013-6944

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2013-6943

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames...

CVE-2013-6940

Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors...

CVE-2013-6942

CVE-2013-6942 affects Citrix NetScaler ADC: CSRF that could allow remote attackers to hijack user authentication in ADC 9.3.x (pre-9.3-64.4), 10.0 (pre-10.0-77.5), and 10.1 (pre-10.1-118.7). Base score 6.8 (MEDIUM) per NVD; affected components are the ADC CSRF flaw, with impact on confidentiality...

CVE-2013-6939

CVE-2013-6939 affects Citrix NetScaler Application Delivery Controller (ADC) versions 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7. It describes an unspecified vulnerability that allows attackers to cause a denial of service via unknown vectors, related to RADIUS authe...

CVE-2013-6938

CVE-2013-6938 affects Citrix NetScaler SDX and ADC versions prior to specific build numbers (SDX 9.3-64.4, 10.0-77.5; ADC 9.3.x-64.4, 10.0-77.5, 10.1-118.7) with a vulnerability in the VM Virtual Machine Daemon that allows attackers to cause a denial of service via unknown vectors. The Nessus ent...

CVE-2013-6941

Unspecified vulnerability in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors...

Citrix NetScaler Version Detection

Binary data citrixnetscalerdetect.nbin...

Citrix Netscaler 10.0 Denial Of Service Vulnerability

A vulnerability was found in the nsconfigd daemon TCP port 3008/SSL and 3010. This daemon can be crashed by sending a specially crafted message. No prior authentication is necessary. A watchdog daemon pitboss automatically restarts nsconfigd after the first six crashes and then reboots the...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

Cross site request forgery (csrf)

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

CVE-2013-6011

Citrix NetScaler Application Delivery Controller ADC 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service nsconfigd crash and appliance reboot via a crafted request...

CVE-2013-6011

CVE-2013-6011 affects Citrix NetScaler (ADC) 10.0 prior to 10.0-76.7, where a crafted request can remotely trigger a denial of service by crashing nsconfigd and rebooting the appliance. The NVD and multiple sources consistently describe an unauthenticated remote DoS vector via the nsconfigd daemo...