Citrix NetScaler 'xen_hotfix' Page Command Injection Vulnerability
BID:73358
Info
Citrix NetScaler 'xen_hotfix' Page Command Injection Vulnerability
| Bugtraq ID: | 73358 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2838 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 19 2015 12:00AM |
| Updated: | May 07 2015 05:27PM |
| Credit: | Han Sahin |
| Vulnerable: |
Citrix NetScaler SDX svm-10.5-50-1.9 |
| Not Vulnerable: |
Citrix Netscaler 10.5 build 52.3nc |
Discussion
Citrix NetScaler 'xen_hotfix' Page Command Injection Vulnerability
Citrix NetScaler is prone to a command-injection vulnerability.
An attacker may leverage this issue to execute arbitrary shell commands with root privileges in context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.
Citrix NetScaler is prone to a command-injection vulnerability.
An attacker may leverage this issue to execute arbitrary shell commands with root privileges in context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions.
Solution / Fix
Citrix NetScaler 'xen_hotfix' Page Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Citrix NetScaler 'xen_hotfix' Page Command Injection Vulnerability
References:
References: