----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Citrix NetScaler / Access Gateway Denial of Service Vulnerability

SECUNIA ADVISORY ID:
SA37271

VERIFY ADVISORY:
http://secunia.com/advisories/37271/

DESCRIPTION:
A vulnerability has been reported in multiple Citrix products, which
can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerability is caused due to an unspecified error in the "URL
Transform", "Application Firewall", and "AGEE Clientless VPN"
features and can be exploited to cause a DoS.

The vulnerability is reported in firmware versions 9.0 prior to build
70.5 and firmware versions 9.1 prior to build 96.4 of the following
products:
* Citrix NetScaler
* Citrix Access Gateway Enterprise Edition
* Citrix NetScaler Application Firewall

SOLUTION:
Update to the latest firmware version.

Citrix NetScaler and Citrix NetScaler Application Firewall:
https://www.citrix.com/English/ss/downloads/results.asp?productID=21679

Citrix Access Gateway Enterprise Edition:
https://www.citrix.com/English/ss/downloads/results.asp?productID=15005

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Rob Carter and Nathan McFeters of Ernst & Young's
Advanced Security Center, and Neel Mehta of Google Security Team.

ORIGINAL ADVISORY:
http://support.citrix.com/article/CTX123060

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------