Vulnerability CVE-2008-4676


Published: 2008-10-22   Modified: 2012-02-13

Description:
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:S/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
10/10
3.1/10
Exploit range
Attack complexity
Authentication
Local
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Citrix -> Access essentials 
Citrix -> Presentation server 
Citrix -> Xenapp 

 References:
http://support.citrix.com/article/CTX116310
http://xforce.iss.net/xforce/xfdb/45507
http://www.vupen.com/english/advisories/2008/2702
http://www.securityfocus.com/bid/31484
http://secunia.com/advisories/32017

Copyright 2021, cxsecurity.com

 

Back to Top