CVEvulnerability
CVE-2009-3936
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-310
Description
Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.
Affected configurations
• citrix online plug-in for mac (<= 10.0)
• citrix online plug-in for windows (<= 11.2)
• citrix online plug-in for windows 11.0
• citrix online plug-in for windows 11.1
• citrix receiver for iphone (<= 1.0)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/37319 Vendor Advisory
- http://support.citrix.com/article/CTX123248 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/37073 www.securityfocus.com
- http://www.securitytracker.com/id?1023168 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/3206 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54213 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/37319 Vendor Advisory
- http://support.citrix.com/article/CTX123248 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/37073 www.securityfocus.com
- http://www.securitytracker.com/id?1023168 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/3206 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54213 exchange.xforce.ibmcloud.com