VAR-200609-0296
Vulnerability from variot - Updated: 2025-04-03 22:26Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors. Citrix Access Gateway is prone to an authentication-bypass vulnerability. Citrix Access Gateway, a general-purpose SSL VPN device, provides secure and always-on single-point access support for information resources.
Want to work within IT-Security?
Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit.
The vulnerability is caused due to an error in the LDAP authentication. Other versions may also be affected.
SOLUTION: Apply hotfix AAC420W004. http://support.citrix.com/article/CTX110439
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://support.citrix.com/article/CTX110950
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200609-0296",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "access gateway",
"scope": "eq",
"trust": 1.6,
"vendor": "citrix",
"version": "4.2"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "citrix",
"version": null
},
{
"model": "access gateway",
"scope": "eq",
"trust": 0.8,
"vendor": "citrix",
"version": "20060914"
},
{
"model": "access gateway",
"scope": "lt",
"trust": 0.8,
"vendor": "citrix",
"version": "4.2"
},
{
"model": "access gateway aac",
"scope": "eq",
"trust": 0.3,
"vendor": "citrix",
"version": "4.2"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "BID",
"id": "20066"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:citrix:access_gateway",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Citrix\u203bhttp://www.citrix.com/",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
}
],
"trust": 0.6
},
"cve": "CVE-2006-4846",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "CVE-2006-4846",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 4.9,
"id": "VHN-20954",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:H/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-4846",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#658620",
"trust": 0.8,
"value": "1.15"
},
{
"author": "NVD",
"id": "CVE-2006-4846",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200609-292",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-20954",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "VULHUB",
"id": "VHN-20954"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors. Citrix Access Gateway is prone to an authentication-bypass vulnerability. Citrix Access Gateway, a general-purpose SSL VPN device, provides secure and always-on single-point access support for information resources. \n\n----------------------------------------------------------------------\n\nWant to work within IT-Security?\n\nSecunia is expanding its team of highly skilled security experts. \nWe will help with relocation and obtaining a work permit. \n\nThe vulnerability is caused due to an error in the LDAP\nauthentication. Other versions may also be affected. \n\nSOLUTION:\nApply hotfix AAC420W004. \nhttp://support.citrix.com/article/CTX110439\n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://support.citrix.com/article/CTX110950\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4846"
},
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "BID",
"id": "20066"
},
{
"db": "VULHUB",
"id": "VHN-20954"
},
{
"db": "PACKETSTORM",
"id": "50123"
}
],
"trust": 2.79
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#658620",
"trust": 3.3
},
{
"db": "SECUNIA",
"id": "21941",
"trust": 2.6
},
{
"db": "SECTRACK",
"id": "1016874",
"trust": 2.5
},
{
"db": "NVD",
"id": "CVE-2006-4846",
"trust": 2.5
},
{
"db": "BID",
"id": "20066",
"trust": 2.0
},
{
"db": "VUPEN",
"id": "ADV-2006-3643",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "28938",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292",
"trust": 0.7
},
{
"db": "XF",
"id": "28990",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-20954",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "50123",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "VULHUB",
"id": "VHN-20954"
},
{
"db": "BID",
"id": "20066"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "PACKETSTORM",
"id": "50123"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"id": "VAR-200609-0296",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-20954"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:26:58.643000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "CTX110950",
"trust": 0.8,
"url": "http://support.citrix.com/article/CTX110950"
},
{
"title": "CTX110439",
"trust": 0.8,
"url": "http://support.citrix.com/article/CTX110439"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.kb.cert.org/vuls/id/658620"
},
{
"trust": 2.1,
"url": "http://support.citrix.com/article/ctx110439"
},
{
"trust": 2.1,
"url": "http://support.citrix.com/article/ctx110950"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/20066"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/28938"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1016874"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/21941"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/3643"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28990"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/21941/"
},
{
"trust": 0.8,
"url": "http://support.citrix.com/article/ctx110950 "
},
{
"trust": 0.8,
"url": "http://www.citrix.com/english/ps2/products/product.asp?contentid=15005"
},
{
"trust": 0.8,
"url": "http://securitytracker.com/alerts/2006/sep/1016874.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4846"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4846"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/3643"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/28990"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6168/"
},
{
"trust": 0.1,
"url": "http://secunia.com/quality_assurance_analyst/"
},
{
"trust": 0.1,
"url": "http://secunia.com/hardcore_disassembler_and_reverse_engineer/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/web_application_security_specialist/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "VULHUB",
"id": "VHN-20954"
},
{
"db": "BID",
"id": "20066"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "PACKETSTORM",
"id": "50123"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#658620"
},
{
"db": "VULHUB",
"id": "VHN-20954"
},
{
"db": "BID",
"id": "20066"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"db": "PACKETSTORM",
"id": "50123"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-11-10T00:00:00",
"db": "CERT/CC",
"id": "VU#658620"
},
{
"date": "2006-09-19T00:00:00",
"db": "VULHUB",
"id": "VHN-20954"
},
{
"date": "2006-09-16T00:00:00",
"db": "BID",
"id": "20066"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"date": "2006-09-21T23:56:25",
"db": "PACKETSTORM",
"id": "50123"
},
{
"date": "2006-09-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"date": "2006-09-19T01:07:00",
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-01-29T00:00:00",
"db": "CERT/CC",
"id": "VU#658620"
},
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-20954"
},
{
"date": "2006-09-18T23:21:00",
"db": "BID",
"id": "20066"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-001268"
},
{
"date": "2006-09-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200609-292"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-4846"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Citrix Access Gateway LDAP authentication bypass",
"sources": [
{
"db": "CERT/CC",
"id": "VU#658620"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "20066"
},
{
"db": "CNNVD",
"id": "CNNVD-200609-292"
}
],
"trust": 0.9
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…