CVE-2010-4566 | BDVDB-2026-44672 Detail

Description#

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1024893
http://www.vsecurity.com/resources/advisory/20101221-1
http://support.citrix.com/article/CTX127613
http://securityreason.com/securityalert/8119
http://www.osvdb.org/70099
http://www.exploit-db.com/exploits/16916

Exploit#

http://www.exploit-db.com/exploits/16916

History#

Version 12011-01-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.