PT-2008-3791 · Citrix · Citrix Desktop Server+3

Published 2008-05-18 · Updated 2017-08-08 · CVE-2008-2300

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Citrix Presentation Server versions 4.5 and earlier Citrix Access Essentials versions 2.0 and earlier Citrix Desktop Server version 1.0

Description: The issue allows remote authenticated users to access unauthorized desktops. The exact attack vectors are not specified.

Recommendations: For Citrix Presentation Server versions 4.5 and earlier, update to a version later than 4.5. For Citrix Access Essentials versions 2.0 and earlier, update to a version later than 2.0. For Citrix Desktop Server version 1.0, update to a version later than 1.0.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2300

Affected Products

Citrix Access Essentials

Citrix Desktop Server

Citrix Metaframe Presentation Server

Citrix Presentation Server

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-2300 · Security Note
• http://secunia.com/advisories/30271 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1530/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42439 · Note
• http://xforce.iss.net/xforce/xfdb/42439 · Note
• http://securityfocus.com/bid/29232 · Note
• http://securitytracker.com/id?1020027 · Note
• http://support.citrix.com/article/CTX116941 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2300 · Note