CVE-2009-3936

Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555.

• CWE-310

• http://secunia.com/advisories/37319Vendor Advisory
• http://support.citrix.com/article/CTX123248Patch, Vendor Advisory
• http://www.securityfocus.com/bid/37073
• http://www.securitytracker.com/id?1023168
• http://www.vupen.com/english/advisories/2009/3206Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54213
• http://secunia.com/advisories/37319Vendor Advisory
• http://support.citrix.com/article/CTX123248Patch, Vendor Advisory
• http://www.securityfocus.com/bid/37073
• http://www.securitytracker.com/id?1023168
• http://www.vupen.com/english/advisories/2009/3206Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54213

Published

Nov 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3930Multiple integer overflows in Christos Zoulas file before 5.…
• CVE-2009-3931Incomplete blacklist vulnerability in browser/download/downl…
• CVE-2009-3932The Gears plugin in Google Chrome before 3.0.195.32 allows u…
• CVE-2009-3933WebKit before r50173, as used in Google Chrome before 3.0.19…
• CVE-2009-3934The WebFrameLoaderClient::dispatchDidChangeLocationWithinPag…
• CVE-2009-3935Multiple unspecified vulnerabilities in the Advanced Managem…
• CVE-2009-3937Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_10…
• CVE-2009-3938Buffer overflow in the ABWOutputDev::endWord function in pop…
• CVE-2009-3939The poll_mode_io file for the megaraid_sas driver in the Lin…7.1
• CVE-2009-3940Unspecified vulnerability in Guest Additions in Sun xVM Virt…
• CVE-2009-3941Martin Lambers mpop before 1.0.19, when OpenSSL is used, doe…
• CVE-2009-3942Martin Lambers msmtp before 1.4.19, when OpenSSL is used, do…