PT-2009-4663 · Citrix · Citrix Secure Gateway

Published 2009-06-25 · Updated 2017-08-17 · CVE-2009-2214

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Citrix Secure Gateway versions 3.1 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via an unspecified request to the Secure Gateway service.

Recommendations For versions 3.1 and earlier, update to a version later than 3.1 to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-2214

Affected Products

Citrix Secure Gateway

References · 7

• http://secunia.com/advisories/35503 · Vendor Advisory
• http://securitytracker.com/id?1022420 · Patch
• http://securityfocus.com/bid/35421 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-2214 · Security Note
• http://support.citrix.com/article/CTX121172 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1633 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51216 · Note