Citrix NetScaler DoS

Crash on request processing in nsconfigd TCP/3008, TCP/3010...

SEC Consult SA-20131003-0 :: Denial of service vulnerability in Citrix NetScaler

SEC Consult Vulnerability Lab Security Advisory 20131003-0 ======================================================================= title: nsconfigd NSRPCREMOTECMD Denial of service vulnerability product: Citrix NetScaler vulnerable version: NetScaler 10.0 Build 76.7 fixed version: NetScaler 10.0...

Citrix NetScaler Web Management Interface Default Administrator Credentials

The remote Citrix NetScaler Web Management Interface uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default Password (nsroot) for 'nsroot' Account

The account 'nsroot' on the remote host has the password 'nsroot'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Citrix NetScaler appliances are known to use these credentials to provide complete, administrative access to the Citrix NetScaler...

CVE-2013-2767

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

CVE-2013-2767

Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition AGEE before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors...

CVE-2013-2767

CVE-2013-2767 affects Citrix NetScaler Access Gateway Enterprise Edition (AGEE) and NetScaler AGEE Common Criteria build configurations. The vulnerability allows remote attackers to bypass intranet access restrictions via unknown vectors; vulnerable if running AGEE before 9.3.62.4 (and 10.x up to...

Citrix NetScaler and Access Gateway Enterprise Edition unauthorized access to network resources vulnerability

Overview Citrix NetScaler and Access Gateway Enterprise Edition contain a vulnerability which could result in unauthorized access to network resources. Description Citrix NetScaler and Access Gateway Enterprise Edition contain a vulnerability which could allow a remote attacker to gain unauthoriz...

FreeBSD based telnetd encrypt_key_id brute force

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FreeBSD based...

Citrix NetScaler和Access Gateway多个远程拒绝服务漏洞

BUGTRAQ ID: 36948 Citrix NetScaler是一款网络流量管理产品，Citrix Access Gateway是一款通用的SSL VPN设备。 远程攻击者可以利用Citrix NetScaler和Access Gateway等产品中所使用的URL Transform、Application Firewall和AGEE Clientless VPN功能中的安全漏洞导致拒绝服务。 Citrix Access Gateway 企业版9.1 Citrix Access Gateway 企业版9.0 Citrix NetScaler 9.1 Citrix NetScaler...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

Authorization

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

CVE-2009-2213

The CVE-2009-2213 entry involves Citrix NetScaler Access Gateway (Enterprise Edition) firmware 9.0, 8.1 and earlier. The issue is a default Security global setting: Default Authorization Action is set to Allow, which may allow remote authenticated users to bypass intended access restrictions. The...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

PT-2009-4662 · Citrix · Citrix Netscaler Access Gateway

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware versions 9.0, 8.1, and earlier Description: The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance specifies Allow...

NetScaler web management cookie information

The remote web server is prone to an information disclosure attack. Description : It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. OpenVAS...

NetScaler web management cookie cipher weakness

The remote web server is prone to an information disclosure attack. Description : The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fix...