NVD

Id
15816  
Name
CVE-2010-4566  
Description
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-14  
Modified Date
2011-09-21  
Seq
2010-4566  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89676 15816 CVE-2010-4566 8119  View
89677 15816 CVE-2010-4566 http://support.citrix.com/article/CTX127613  View
89678 15816 CVE-2010-4566 16916  View
89679 15816 CVE-2010-4566 1024893  View
89680 15816 CVE-2010-4566 http://www.vsecurity.com/resources/advisory/20101221-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37732 JVNDB-2010-003517 Citrix Access Gateway の Web 認証フォームにおける任意のコマンドを実行される脆弱性 Citrix Access Gateway Enterprise の NT4 認証コンポーネントおよび Access Gateway Standard /Advanced Editions の NTLM 認証コンポーネントの Web 認証フォームには、任意のコマンドを実行される脆弱性が存在します。 CVE-2010-4566 47146 CVE-2010-4566 15816 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003517.html 2010-12-14 2012-03-27 View