SUSE CVE-2019-10895

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation...

ADC no console after upgrading to 13.1-37.38 error getty: unknown gettytab entry '3wire'

Netscaler lost console access after HA pair was upgraded to 13.1 build 37.38 and received the following error on console: Jan 10 21:39:49 ... getty24784: tcsetattr /dev/ttyu0: Operation not supported Jan 10 21:39:49 ... getty24785: getty: unknown gettytab entry '3wire' Jan 10 21:39:49 ... syslogd...

Citrix License Telemetry FAQ

General License Telemetry Questions What was announced? In mid-November 2024, Cloud Software Group made changes regarding license telemetry for on-premises customer-managed environments which use the Citrix License Server: Starting with License Server 11.17.2 Build 40000, the on-premises...

How to Configure GSLB Setup for Internal Users From GUI

This article contains information about how to configure a GSLB setup for internal users using the same host name. In some scenarios, the administrator requires that all external users coming through the Internet must go through the Citrix Gateway using a public or external IP Address, whereas al...

NetScaler HTTP-ECV monitor probe fails and returns "404 Not Found" response code

The HTTP-ECV monitor fails and returns the 404 Not Found response code. For example, a monitor of the HTTP-ECV type was configured to monitor the status of a backend server using the following as the expected response string: "Response is Successful." The status of the related service was marked ...

How to know how many connections have been made to the device.

How to Determine the IP Addresses of Active Connections to a Virtual Server of a NetScaler...

Notice Of Change Announcement for NetScaler (Citrix ADC) Perpetually Licensed Hardware and Software

Applicable Products NetScaler Citrix ADC perpetually licensed hardware MPX, SDX and software VPX/BLX, & Standard Edition across all NetScaler Citrix ADC products. Information NetScaler, a business unit of Cloud Software Group, has made the decision to end of sale EoS NetScaler Citrix ADC...

exploits

Blog Post https://blog.as...

Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway

Post external log on to Netscaler Gateway you receive a server error with the following text: Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway...

Citrix Gateway和Citrix ADC 数据伪造问题漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

PT-2022-5429

Name of the Vulnerable Software and Affected Versions Citrix Gateway affected versions not specified Citrix NetScaler Application Delivery Controller affected versions not specified Description The issue is related to unauthorized access to Gateway user capabilities. It involves a bypass of the...

Citrix Gateway和Citrix ADC 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

[VPN Plugin] Transfer Login keeps Loading with Non-English language setting

In Citrix Gateway VPN environment, you may observe the following issue when "Transfer Login": After clicking "Transfer" on Client VPN plugin, the button keepsspinning loading and stuck. Logs investigation show the following clues: Problem can only be observed in Non-English language setting Plugi...

HTML5 app launch doesn't work via Netscaler after upgrading the CVAD setup

Upgrade Xendesktop from 7.15 Cu8 to 1912 CU5 or above Could connect externally through ADC Netscaler using HTML5 when on 7.15 but not with the latest codes Connecting to the machines using HTML5 via direct storefront works fine App launch via workspace app works fine though ADC as well Only while...

Metasploit Weekly Wrap-Up

JBOSS EAP/AS - More Deserializations? Indeed! Community contributor Heyder Andrade added in a new module for a Java deserialization vulnerability in JBOSS EAP/AS Remoting Unified Invoker interface for versions 6.1.0 and prior. As far as we can tell this was first disclosed by Joao Matos in his...

How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance

This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...

How to Manually Configure Certificate Trust in Web Interface for NetScaler

This article describes how to import a root Certificate Authority CA into the NetScaler's trusted certificate store using the CLI. Setting up the certificate trust is necessary when deploying Web Interface for NetScaler in Gateway Direct Mode with the Authentication Point set to Access Gateway: A...

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: 1192408 1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux...

Decrypt Citrix NetScaler Config Secrets

This module takes a Citrix NetScaler ns.conf configuration file as input and extracts secrets that have been stored with reversible encryption. The module supports legacy NetScaler encryption RC4 as well as the newer AES-256-ECB and AES-256-CBC encryption types. It is also possible to decrypt...

Citrix NetScaler SD-WAN Remote Code Execution (CVE-2017-6316)

A remote code execution vulnerability exists in Citrix NetScaler SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...