CVE-2010-4566

This exploit leverages a command injection vulnerability in Citrix Access Gateway's NTLM authentication module by embedding shell metacharacters in the login form, allowing arbitrary command execution. The PoC uses a POST request to trigger the vulnerability and includes a check method to verify exploitability.

This advisory details a command injection vulnerability in Citrix Access Gateway's legacy NT4 authentication module, where shell metacharacters in the password field can lead to arbitrary command execution. The vulnerability arises from improper handling of user credentials passed to the Samba 'samedit' utility.

This Metasploit module exploits a command injection vulnerability in Citrix Access Gateway's NTLM authentication by injecting shell metacharacters into the login form, allowing arbitrary command execution. The exploit leverages the Samba 'samedit' utility to achieve RCE.