CVE:CVE-2010-4566
CNNVD:CNNVD-201101-163
Citrix Access Gateway是一款通用的SSL VPN设备。
Citrix Access Gateway Enterprise Edition 9.2-49.8及之前版本中的NT4认证组件，Access Gateway 5.0之前的Access Gateway Standard和Advanced Editions中的NTLM认证组件中的web认证表单中存在命令注入漏洞。远程攻击者可借助密码字段中的shell元字符执行任意命令。
solution:Upgrade citrix access_gateway to a higher version than 9.2-49.8,.8.0:m50.3,8.0:m48.7,8.0:m49.2,8.0:m59.1,8.1-69.4,9.0.71.3,9.1-104.5,4.5,4.5:hf1,4.5.5,4.5.6,4.5.7,4.6.1,4.6.2,4.6.3,and avoid the version (,9.2-49.8],.8.0:m50.3,8.0:m48.7,8.0:m49.2,8.0:m59.1,8.1-69.4,9.0.71.3,9.1-104.5,4.5,4.5:hf1,4.5.5,4.5.6,4.5.7,4.6.1,4.6.2,4.6.3