PT-2009-2031 · Citrix · Citrix Presentation Server Client

Published 2009-03-31 · Updated 2017-08-17 · CVE-2008-6561

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix Presentation Server Client for Windows versions prior to 10.200

Description The issue concerns the failure to clear credential information from process memory under certain circumstances, potentially allowing local users to gain privileges.

Recommendations For versions prior to 10.200, update to version 10.200 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-6561

Affected Products

Citrix Presentation Server Client

References · 5

• http://support.citrix.com/article/CTX116227 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6561 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41102 · Note
• http://securitytracker.com/id?1019605 · Note
• http://vupen.com/english/advisories/2008/0845 · Note