Unknown Security Bypass Vulnerability in Citrix Access Gateway

Release date:
Updated on:

Affected Systems:
Citrix Access Gateway 4.5.5
Citrix Access Gateway 4.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58317
CVE (CAN) ID: CVE-2013-2263
 
Citrix Access Gateway is an ssl vpn that provides secure remote Access to virtual desktops and applications.
 
The implementation of Citrix Access Gateway 5.0.4.223524 or earlier has an unknown details vulnerability, which can cause unauthorized Access to network resources.
 
<* Source: Ben Williams

Link: http://secunia.com/advisories/52479/
Http://support.citrix.com/article/CTX136623
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Citrix
------
Citrix has released a Security Bulletin (CTX136623) and corresponding patches for this:
 
CTX136623: Vulnerability in Citrix Access Gateway Standard Edition 5.0 cocould Result in Unauthorized Access to Network Resources
Link: http://support.citrix.com/article/CTX136623
 
Patch download: http://www.citrix.com/downloads/netscaler-access-gateway/product-software/access-gateway-504.html