OSVDB ID: 37845

Title: Citrix Access Gateway EPA ActiveX npCtxCAO.dll (aka CCAOControl Object) Arbitrary File Download

Info

Disclosure

Jul 18, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Location: Remote / Network Access, Context Dependent
Attack Type: Input Manipulation
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

CVE ID: 2007-3679 (see also: NVD)
Bugtraq ID: 24865 24975
Secunia Advisory ID: 26143
ISS X-Force ID: 35511
Related OSVDB ID: 37840 37841 37842
VUPEN Advisory: ADV-2007-2583
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-07/0211.html
Other Advisory URL: http://securityreason.com/securityalert/2916
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt
Vendor Specific News/Changelog Entry: http://support.citrix.com/article/CTX113815
http://support.citrix.com/article/CTX114028
Keyword: SYMSA-2007-006

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/37845