Citrix NetScaler Application Delivery Controller CVE-2013-6943 LDAP Injection Vulnerability

Bugtraq ID:	66043
Class:	Input Validation Error
CVE:	CVE-2013-6943
Remote:	Yes
Local:	No
Published:	Mar 05 2014 12:00AM
Updated:	Mar 05 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Citrix Netscaler Application Delivery Controller 9.3 Citrix Netscaler Application Delivery Controller 10.1 Citrix Netscaler Application Delivery Controller 10.0 Citrix Netscaler 9.3.e Citrix Netscaler 9.3 Citrix Netscaler 10.1 Citrix Netscaler 10.0
Not Vulnerable:	Citrix Netscaler Application Delivery Controller 9.3-64.4 Citrix Netscaler Application Delivery Controller 10.1-118.7 Citrix Netscaler Application Delivery Controller 10.0-77.5

Citrix NetScaler Application Delivery Controller CVE-2013-6943 LDAP Injection Vulnerability

Citrix NetScaler Application Delivery Controller (ADC) is prone to a LDAP injection vulnerability.

Exploiting this issue could allow an attacker to access or modify data, or exploit latent vulnerabilities in the underlying distributed directory information services.

The following versions are vulnerable:

Netscaler Application Delivery Controller prior 10.1-118.7
Netscaler Application Delivery Controller prior 10.0-77.5
Netscaler Application Delivery Controller prior 9.3-64.4

Citrix NetScaler Application Delivery Controller CVE-2013-6943 LDAP Injection Vulnerability

Attackers can use a browser to exploit this issue.

Citrix NetScaler Application Delivery Controller CVE-2013-6943 LDAP Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.

Citrix NetScaler Application Delivery Controller CVE-2013-6943 LDAP Injection Vulnerability

References:

• Citrix NetScaler Homepage (Citrix)
  
• Citrix NetScaler Application Delivery Controller Multiple Security Vulnerabiliti (Citrix)