Sign-up

ID

VAR-201107-0297


CVE

CVE-2011-2882


TITLE

Citrix Access Gateway Enterprise of nsepa.ocx of NSEPA.NsepaCtrl.1 ActiveX Control Vulnerable to stack-based buffer overflow

Trust: 0.8

sources: JVNDB: JVNDB-2011-004816

DESCRIPTION

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data. Citrix Access Gateway is a universal SSL VPN device. Attackers may exploit these issues by enticing an unsuspecting victim to view a malicious webpage. Citrix Access Gateway Plug-in versions prior to 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable; other versions may also be affected

Trust: 2.52

sources: NVD: CVE-2011-2882 // JVNDB: JVNDB-2011-004816 // CNVD: CNVD-2011-3492 // BID: 48676 // VULHUB: VHN-50827

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-3492

AFFECTED PRODUCTS

vendor:citrixmodel:access gatewayscope:eqversion:9.0

Trust: 1.6

vendor:citrixmodel:access gatewayscope:eqversion:8.1

Trust: 1.6

vendor:citrixmodel:access gatewayscope:eqversion:9.1

Trust: 1.6

vendor:citrixmodel:access gatewayscope:eqversion:9.0-70.5

Trust: 0.8

vendor:citrixmodel:access gatewayscope:ltversion:9.1

Trust: 0.8

vendor:citrixmodel:access gatewayscope:eqversion:9.1-96.4

Trust: 0.8

vendor:citrixmodel:access gatewayscope:ltversion:8.1

Trust: 0.8

vendor:citrixmodel:access gatewayscope:ltversion:9.0

Trust: 0.8

vendor:citrixmodel:access gatewayscope:eqversion:enterprise edition 8.1-67.7

Trust: 0.8

vendor:citrixmodel:access gatewayscope:ltversion:8.1-67.7

Trust: 0.6

vendor:citrixmodel:access gatewayscope:ltversion:9.0-70.5

Trust: 0.6

vendor:citrixmodel:access gatewayscope:ltversion:9.1-96.4

Trust: 0.6

sources: CNVD: CNVD-2011-3492 // JVNDB: JVNDB-2011-004816 // CNNVD: CNNVD-201107-362 // NVD: CVE-2011-2882

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-2882
value: HIGH

Trust: 1.0

NVD: CVE-2011-2882
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201107-362
value: CRITICAL

Trust: 0.6

VULHUB: VHN-50827
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2011-2882
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-50827
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-50827 // JVNDB: JVNDB-2011-004816 // CNNVD: CNNVD-201107-362 // NVD: CVE-2011-2882

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-50827 // JVNDB: JVNDB-2011-004816 // NVD: CVE-2011-2882

THREAT TYPE

remote

Trust: 1.2

sources: CNNVD: CNNVD-201107-207 // CNNVD: CNNVD-201107-362

TYPE

code injection

Trust: 0.6

sources: CNNVD: CNNVD-201107-207

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-004816

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-50827

PATCH
title:NetScaler Access Gatewayurl:http://www.citrix.com/English/ps2/products/product.asp?contentID=15005&ntref=prod_biz
Trust: 0.8
title:Patch for Citrix Gateway ActiveX Control Stack Buffer Overflow Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/4989
Trust: 0.6
title:AG 9.1-104.5 (Classic) Enterprise - Plug-in for Windows-64biturl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=44233
Trust: 0.6
title:AG 9.1-104.5 (Classic) Enterprise - Plug-in for Windows-32biturl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=44232
Trust: 0.6
title:AG 8.1-69.4 Enterprise - Plug-in for Windowsurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=44230
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2011-3492 // 
            
            
            
            JVNDB: JVNDB-2011-004816 // 
            
            
            
            CNNVD: CNNVD-201107-362

EXTERNAL IDS
db:NVDid:CVE-2011-2882
Trust: 3.4
db:SREASONid:8358
Trust: 1.1
db:BIDid:48676
Trust: 0.9
db:JVNDBid:JVNDB-2011-004816
Trust: 0.8
db:EXPLOIT-DBid:17762
Trust: 0.7
db:CNNVDid:CNNVD-201107-362
Trust: 0.7
db:CNVDid:CNVD-2011-3492
Trust: 0.6
db:CNNVDid:CNNVD-201107-207
Trust: 0.6
db:IDEFENSEid:20110714 CITRIX ACCESS GATEWAY ACTIVEX STACK BUFFER OVERFLOW VULNERABILITY
Trust: 0.6
db:SEEBUGid:SSVID-72046
Trust: 0.1
db:PACKETSTORMid:104603
Trust: 0.1
db:VULHUBid:VHN-50827
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-3492 // 
            
            
            
            VULHUB: VHN-50827 // 
            
            
            
            BID: 48676 // 
            
            
            
            JVNDB: JVNDB-2011-004816 // 
            
            
            
            CNNVD: CNNVD-201107-207 // 
            
            
            
            CNNVD: CNNVD-201107-362 // 
            
            
            
            NVD: CVE-2011-2882

REFERENCES
url:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=929
Trust: 2.0
url:http://securityreason.com/securityalert/8358
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2882
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-2882
Trust: 0.8
url:http://www.exploit-db.com/exploits/17762/http
Trust: 0.6
url:http://www.securityfocus.com/bid/48676
Trust: 0.6
url:http://support.citrix.com/article/ctx129902
Trust: 0.3
url:http://www.citrix.com/
Trust: 0.3
url:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=928
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2011-3492 // 
            
            
            
            VULHUB: VHN-50827 // 
            
            
            
            BID: 48676 // 
            
            
            
            JVNDB: JVNDB-2011-004816 // 
            
            
            
            CNNVD: CNNVD-201107-207 // 
            
            
            
            CNNVD: CNNVD-201107-362 // 
            
            
            
            NVD: CVE-2011-2882

CREDITS
Joshua J. Drake and Michal Trojnara
Trust: 0.9
sources:
            
            
            BID: 48676 // 
            
            
            
            CNNVD: CNNVD-201107-207

SOURCES
db:CNVDid:CNVD-2011-3492
db:VULHUBid:VHN-50827
db:BIDid:48676
db:JVNDBid:JVNDB-2011-004816
db:CNNVDid:CNNVD-201107-207
db:CNNVDid:CNNVD-201107-362
db:NVDid:CVE-2011-2882

LAST UPDATE DATE
2024-08-14T14:21:36.684000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2011-3492date:2011-09-05T00:00:00
db:VULHUBid:VHN-50827date:2011-09-22T00:00:00
db:BIDid:48676date:2011-08-31T07:30:00
db:JVNDBid:JVNDB-2011-004816date:2012-03-27T00:00:00
db:CNNVDid:CNNVD-201107-207date:2011-07-18T00:00:00
db:CNNVDid:CNNVD-201107-362date:2011-07-22T00:00:00
db:NVDid:CVE-2011-2882date:2011-09-22T03:32:28.553

SOURCES RELEASE DATE
db:CNVDid:CNVD-2011-3492date:2011-09-05T00:00:00
db:VULHUBid:VHN-50827date:2011-07-21T00:00:00
db:BIDid:48676date:2011-07-14T00:00:00
db:JVNDBid:JVNDB-2011-004816date:2012-03-27T00:00:00
db:CNNVDid:CNNVD-201107-207date:1900-01-01T00:00:00
db:CNNVDid:CNNVD-201107-362date:2011-07-22T00:00:00
db:NVDid:CVE-2011-2882date:2011-07-21T23:55:04.270