CVE-2015-2841 in Netscaler

Summary

Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

04/03/2015

Disclosure

04/03/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
74633	Citrix Netscaler AppFirewall octet-stream access control	284	Proof-of-Concept	Not defined	CVE-2015-2841
74017	Citrix Netscaler HTTP Header access control	284	Proof-of-Concept	Unavailable	CVE-2015-2841

Sources

• MITRE
• NVD
• CVE Details