PT-2008-3791 · Citrix · Citrix Desktop Server+3

Publicado 2008-05-18 · Atualizado 2017-08-08 · CVE-2008-2300

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Citrix Presentation Server versions 4.5 and earlier Citrix Access Essentials versions 2.0 and earlier Citrix Desktop Server version 1.0

Description: The issue allows remote authenticated users to access unauthorized desktops. The exact attack vectors are not specified.

Recommendations: For Citrix Presentation Server versions 4.5 and earlier, update to a version later than 4.5. For Citrix Access Essentials versions 2.0 and earlier, update to a version later than 2.0. For Citrix Desktop Server version 1.0, update to a version later than 1.0.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-2300

Produtos afetados

Citrix Access Essentials

Citrix Desktop Server

Citrix Metaframe Presentation Server

Citrix Presentation Server

Referências · 9

• http://vupen.com/english/advisories/2008/1530/references · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42439 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2300 · Nota de Segurança
• http://secunia.com/advisories/30271 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/42439 · Nota
• http://securityfocus.com/bid/29232 · Nota
• http://securitytracker.com/id?1020027 · Nota
• http://support.citrix.com/article/CTX116941 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2300 · Nota