Citrix NetScaler/Access Gateway Security Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Citrix Access Gateway 9.x
Citrix NetScaler 9.x
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2013-2767
 
Citrix NetScaler is a network traffic management product. Citrix Access Gateway is a common ssl vpn device.
 
Citrix NetScaler/Access Gateway has a security vulnerability that allows remote attackers to Access network resources without authorization.
 
<* Source: HyeongKwan Lee

Link: http://secunia.com/advisories/53200/
Http://support.citrix.com/article/CTX137238
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Citrix
------
Citrix has released a Security Bulletin (CTX137238) and corresponding patches for this:
CTX137238: Vulnerability in Citrix NetScaler Access Gateway Enterprise Edition cocould Result in Unauthorized Access to Network Resources
Link: http://support.citrix.com/article/CTX137238
 
Patch download: https://www.citrix.com/downloads/netscaler-adc/firmware.html