CVE-2011-2883: Input Validation

Published Jul 21, 2011

Updated

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.

Affected Software

3 affected components

Citrix Access Gateway=8.1

Citrix Access Gateway=9.0

Citrix Access Gateway=9.1

Event History

Jul 21, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2883?

CVE-2011-2883 is classified as a moderate severity vulnerability.

How do I fix CVE-2011-2883?

To fix CVE-2011-2883, you should upgrade to the appropriate version of Citrix Access Gateway that addresses the vulnerability.

What type of attack does CVE-2011-2883 allow?

CVE-2011-2883 allows man-in-the-middle attackers to execute arbitrary code due to improper validation of signed DLLs.

Which versions of Citrix Access Gateway are affected by CVE-2011-2883?

CVE-2011-2883 affects Citrix Access Gateway versions 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4.

What component is involved in CVE-2011-2883?

CVE-2011-2883 involves the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx.