ID

VAR-201505-0101


CVE

CVE-2015-2829


TITLE

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2015-002680

DESCRIPTION

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot) via unspecified vectors. An attacker can exploit this issue to reboot the appliance, resulting in denial-of-service conditions

Trust: 1.98

sources: NVD: CVE-2015-2829 // JVNDB: JVNDB-2015-002680 // BID: 74473 // VULHUB: VHN-80790

AFFECTED PRODUCTS

vendor:citrixmodel:netscaler application delivery controllerscope:eqversion:10.5

Trust: 1.6

vendor:citrixmodel:netscaler gatewayscope:eqversion:10.5

Trust: 1.6

vendor:citrixmodel:netscaler gatewayscope:eqversion:10.5e

Trust: 1.6

vendor:citrixmodel:netscaler application delivery controllerscope: - version: -

Trust: 0.8

vendor:citrixmodel:netscaler application delivery controllerscope:eqversion:10.5 build 53.9 to 55.8

Trust: 0.8

vendor:citrixmodel:netscaler application delivery controllerscope:eqversion:10.5.e build 53-9010.e

Trust: 0.8

vendor:citrixmodel:netscaler gatewayscope: - version: -

Trust: 0.8

vendor:citrixmodel:netscaler gatewayscope:eqversion:10.5 build 53.9 to 55.8

Trust: 0.8

vendor:citrixmodel:netscaler gatewayscope:eqversion:10.5.e build 53-9010.e

Trust: 0.8

vendor:citrixmodel:netscaler gateway 10.5.e buildscope:eqversion:53-9010

Trust: 0.3

vendor:citrixmodel:netscaler application delivery controller buildscope:eqversion:10.555.8

Trust: 0.3

vendor:citrixmodel:netscaler application delivery controller buildscope:eqversion:10.553.9

Trust: 0.3

vendor:citrixmodel:netscaler gateway 10.5.e buildscope:neversion:54.9009

Trust: 0.3

vendor:citrixmodel:netscaler application delivery controller buildscope:neversion:10.556.15

Trust: 0.3

sources: BID: 74473 // JVNDB: JVNDB-2015-002680 // CNNVD: CNNVD-201505-033 // NVD: CVE-2015-2829

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-2829
value: HIGH

Trust: 1.0

NVD: CVE-2015-2829
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201505-033
value: HIGH

Trust: 0.6

VULHUB: VHN-80790
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2015-2829
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-80790
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-80790 // JVNDB: JVNDB-2015-002680 // CNNVD: CNNVD-201505-033 // NVD: CVE-2015-2829

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2015-2829

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201505-033

TYPE

Unknown

Trust: 0.3

sources: BID: 74473

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-002680

PATCH

title:CTX200861url:http://support.citrix.com/article/CTX200861

Trust: 0.8

sources: JVNDB: JVNDB-2015-002680

EXTERNAL IDS

db:NVDid:CVE-2015-2829

Trust: 2.8

db:BIDid:74473

Trust: 1.4

db:SECTRACKid:1032242

Trust: 1.1

db:JVNDBid:JVNDB-2015-002680

Trust: 0.8

db:SECUNIAid:64370

Trust: 0.6

db:CNNVDid:CNNVD-201505-033

Trust: 0.6

db:VULHUBid:VHN-80790

Trust: 0.1

sources: VULHUB: VHN-80790 // BID: 74473 // JVNDB: JVNDB-2015-002680 // CNNVD: CNNVD-201505-033 // NVD: CVE-2015-2829

REFERENCES

url:http://support.citrix.com/article/ctx200861

Trust: 2.0

url:http://www.securityfocus.com/bid/74473

Trust: 1.1

url:http://www.securitytracker.com/id/1032242

Trust: 1.1

url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2829

Trust: 0.8

url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-2829

Trust: 0.8

url:http://secunia.com/advisories/64370

Trust: 0.6

url:http://www.citrix.com/

Trust: 0.3

url:https://www.citrix.com/products/netscaler-application-delivery-controller/overview.html

Trust: 0.3

sources: VULHUB: VHN-80790 // BID: 74473 // JVNDB: JVNDB-2015-002680 // CNNVD: CNNVD-201505-033 // NVD: CVE-2015-2829

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 74473

SOURCES

db:VULHUBid:VHN-80790
db:BIDid:74473
db:JVNDBid:JVNDB-2015-002680
db:CNNVDid:CNNVD-201505-033
db:NVDid:CVE-2015-2829

LAST UPDATE DATE

2024-11-23T23:05:39.452000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-80790date:2017-01-03T00:00:00
db:BIDid:74473date:2015-05-06T00:00:00
db:JVNDBid:JVNDB-2015-002680date:2015-05-18T00:00:00
db:CNNVDid:CNNVD-201505-033date:2015-05-07T00:00:00
db:NVDid:CVE-2015-2829date:2024-11-21T02:28:10.433

SOURCES RELEASE DATE

db:VULHUBid:VHN-80790date:2015-05-12T00:00:00
db:BIDid:74473date:2015-05-06T00:00:00
db:JVNDBid:JVNDB-2015-002680date:2015-05-18T00:00:00
db:CNNVDid:CNNVD-201505-033date:2015-05-07T00:00:00
db:NVDid:CVE-2015-2829date:2015-05-12T19:59:16.887