ID CVE-2007-4016
Summary Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows attackers to execute arbitrary code via unspecified vectors. Citrix Access Gateway is available as software or as a hardware device.
References
Vulnerable Configurations
  • cpe:2.3:a:citrix:access_gateway:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:citrix:access_gateway:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:citrix:access_gateway:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:citrix:access_gateway:4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:citrix:access_gateway:4.5:hf1:advanced:*:*:*:*:*
    cpe:2.3:a:citrix:access_gateway:4.5:hf1:advanced:*:*:*:*:*
  • cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*
    cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*
CVSS
Base: 6.8 (as of 08-03-2011 - 02:57)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 24975
confirm
osvdb 43983
sectrack 1018435
secunia 26143
vupen ADV-2007-2583
Last major update 08-03-2011 - 02:57
Published 26-07-2007 - 01:30
Last modified 08-03-2011 - 02:57
Back to Top