PT-2007-4925 · Citrix · Citrix Access Gateway Standard Edition+2

Publicado 2007-07-25 · Atualizado 2018-10-15 · CVE-2007-3679

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway Standard Edition versions prior to 4.5.5 Citrix Access Gateway Advanced Edition versions prior to 4.5 HF1 Citrix EPA ActiveX control version prior to 4.5.0.0

Description The issue allows remote attackers to download and execute arbitrary programs onto a client system. This is due to a problem in the Citrix EPA ActiveX control, also known as the endpoint checking control or CCAOControl Object, which is part of npCtxCAO.dll.

Recommendations For Citrix Access Gateway Standard Edition versions prior to 4.5.5, update to version 4.5.5 or later. For Citrix Access Gateway Advanced Edition versions prior to 4.5 HF1, update to version 4.5 HF1 or later. For the Citrix EPA ActiveX control version prior to 4.5.0.0, update to version 4.5.0.0 or later.

Correção

Identificadores relacionados

CVE-2007-3679

Produtos afetados

Citrix Access Gateway Advanced Edition

Citrix Access Gateway Standard Edition

Citrix Epa Activex Control

Referências · 13

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3679 · Nota
• http://securityreason.com/securityalert/2916 · Nota
• http://osvdb.org/37845 · Nota
• http://securityfocus.com/bid/24865 · Nota
• http://securityfocus.com/archive/1/474204/100/0/threaded · Nota
• http://securityfocus.com/bid/24975 · Correção
• http://secunia.com/advisories/26143 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35511 · Nota
• http://vupen.com/english/advisories/2007/2583 · Nota
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt · Nota
• http://support.citrix.com/article/CTX114028 · Correção
• http://support.citrix.com/article/CTX113815 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-3679 · Nota de Segurança