Citrix Secure Gateway Unspecified Remote Code Execution

high Nessus Plugin ID 52547

Synopsis

A gateway application on the remote host has an unspecified code execution vulnerability.

Description

The version of Citrix Secure Gateway running on the remote host has an unspecified code execution vulnerability. This could reportedly allow a remote attacker to execute arbitrary code in the context of the Secure Gateway process.

Solution

Upgrade to Citrix Secure Gateway 3.1.5 or later.

See Also

https://support.citrix.com/article/CTX128168

http://support.citrix.com/article/CTX127793

Plugin Details

Severity: High

ID: 52547

File Name: citrix_secure_gateway_3_1_5.nasl

Version: 1.7

Type: local

Agent: windows

Family: Windows

Published: 3/4/2011

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:citrix:secure_gateway

Required KB Items: SMB/citrix_secure_gateway/path, SMB/citrix_secure_gateway/ver

Exploit Ease: No known exploits are available

Patch Publication Date: 2/27/2011

Vulnerability Publication Date: 2/27/2011

Reference Information

BID: 46596

Secunia: 43497