Vulnerability CVE-2008-2300
Published: 2008-05-18   Modified: 2012-02-12

Description:
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.5/10
6.4/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Citrix -> Access essentials 
Citrix -> Citrix presentation server 
Citrix -> Desktop server 
Citrix -> Metaframe presentation server 

 References:
http://xforce.iss.net/xforce/xfdb/42439
http://www.vupen.com/english/advisories/2008/1530/references
http://www.securitytracker.com/id?1020027
http://www.securityfocus.com/bid/29232
http://support.citrix.com/article/CTX116941
http://secunia.com/advisories/30271
Copyright 2024, cxsecurity.com

 

Back to Top