NVD

Id
9604  
Name
CVE-2011-2883  
Description
The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to execute arbitrary code via HTTP header data referencing a DLL that was signed with a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-21  
Modified Date
2011-07-22  
Seq
2011-2883  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54841 9604 CVE-2011-2883 20110714 Citrix Access Gateway ActiveX Arbitrary Libary Loading Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34575 JVNDB-2011-004817 Citrix Access Gateway Enterprise の nsepa.ocx の NSEPA.NsepaCtrl.1 ActiveX コントロールにおける任意のコードを実行される脆弱性 Citrix Access Gateway Enterprise のnsepa.ocx の NSEPA.NsepaCtrl.1 ActiveX コントロールは、証明書の署名ではなく件名をチェックすることで署名付き DLL を検証するため、任意のコードを実行される脆弱性が存在します。 CVE-2011-2883 50790 CVE-2011-2883 9604 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004817.html 2011-07-21 2012-03-27 View