PT-2017-2028 · Citrix · Citrix Netscaler Gateway

Publicado 2017-04-13 · Atualizado 2017-07-11 · CVE-2017-7219

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Gateway versions 10.1 through 10.1 before 135.8/135.12 Citrix NetScaler Gateway versions 10.5 through 10.5 before 65.11 Citrix NetScaler Gateway versions 11.0 through 11.0 before 70.12 Citrix NetScaler Gateway versions 11.1 through 11.1 before 52.13

Description A heap overflow issue allows a remote authenticated attacker to execute arbitrary commands via unspecified vectors. The vulnerability is caused by a buffer overflow in the system's software, potentially enabling a remote attacker to exploit it.

Recommendations For versions 10.1 before 135.8/135.12, update to version 135.8/135.12 or later. For versions 10.5 before 65.11, update to version 65.11 or later. For versions 11.0 before 70.12, update to version 70.12 or later. For versions 11.1 before 52.13, update to version 52.13 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-01195

CVE-2017-7219

Produtos afetados

Citrix Netscaler Gateway

Referências · 7

• 🔥 https://blog.scrt.ch/2017/04/26/heap-overflow-vulnerability-in-citrix-netscaler-gateway-cve-2017-7219 · Exploit
• https://osv.dev/vulnerability/CVE-2017-7219 · Aviso do Fabricante
• http://securitytracker.com/id/1038283 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7219 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-01195 · Nota de Segurança
• http://securityfocus.com/bid/97626 · Aviso do Fabricante
• https://support.citrix.com/article/CTX222657 · Aviso do Fabricante