PT-2008-6254 · Citrix · Citrix Presentation Server+1

Publicado 2008-11-17 · Atualizado 2017-12-04 · CVE-2008-5107

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix Presentation Server version 4.5 Citrix Desktop Server version 1.0

Description The installation process stores database credentials in MSI log files when MSI logging is enabled. This allows local users to obtain these credentials by reading the log files.

Recommendations For Citrix Presentation Server version 4.5, consider disabling MSI logging during the installation process to prevent database credentials from being stored in log files. For Citrix Desktop Server version 1.0, restrict access to MSI log files to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-5107

Produtos afetados

Citrix Desktop Server

Citrix Presentation Server

Referências · 4

• http://vupen.com/english/advisories/2008/0705/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5107 · Nota de Segurança
• http://securityfocus.com/bid/28047 · Nota
• http://support.citrix.com/article/CTX116228 · Aviso do Fabricante