PT-2011-4168 · Citrix · Citrix Access Gateway Enterprise Edition

Michal Trojnara · Publicado 2011-07-21 · Atualizado 2011-09-22 · CVE-2011-2882

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway Enterprise Edition versions 8.1 through 8.1-67.7 Citrix Access Gateway Enterprise Edition versions 9.0 through 9.0-70.5 Citrix Access Gateway Enterprise Edition versions 9.1 through 9.1-96.4

Description A stack-based buffer overflow issue exists in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx. This allows remote attackers to execute arbitrary code via crafted HTTP header data.

Recommendations For Citrix Access Gateway Enterprise Edition versions 8.1 through 8.1-67.7, update to version 8.1-67.7 or later. For Citrix Access Gateway Enterprise Edition versions 9.0 through 9.0-70.5, update to version 9.0-70.5 or later. For Citrix Access Gateway Enterprise Edition versions 9.1 through 9.1-96.4, update to version 9.1-96.4 or later.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2882

Produtos afetados

Citrix Access Gateway Enterprise Edition

Referências · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/citrix_gateway_actx.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17762 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2882 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2882 · Nota de Segurança
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929 · Nota
• http://securityreason.com/securityalert/8358 · Nota