Lucene search

[email protected]CVE-2008-4676

HistoryOct 22, 2008 - 10:30 a.m.

CVE-2008-4676

2008-10-2210:30:01

CWE-264

[email protected]

web.nvd.nist.gov

cve-2008-4676

citrix xenapp

presentation server

access essentials

privilege escalation

file creation

6.3 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.

Affected configurations

NVD

Node

citrixaccess_essentialsMatch1.0

citrixaccess_essentialsMatch1.5

citrixaccess_essentialsMatch2.0

citrixpresentation_serverMatch4.0

citrixxenappRange≤4.5fp1

citrixxenappMatch4.5

CPENameOperatorVersion
citrix:access_essentialscitrix access essentialseq1.0
citrix:access_essentialscitrix access essentialseq1.5
citrix:access_essentialscitrix access essentialseq2.0
citrix:presentation_servercitrix presentation servereq4.0
citrix:xenappcitrix xenapple4.5

CPE	Name	Operator	Version
citrix:access_essentials	citrix access essentials	eq	1.0
citrix:access_essentials	citrix access essentials	eq	1.5
citrix:access_essentials	citrix access essentials	eq	2.0
citrix:presentation_server	citrix presentation server	eq	4.0
citrix:xenapp	citrix xenapp	le	4.5

References

secunia.com/advisories/32017

support.citrix.com/article/CTX116310

www.securityfocus.com/bid/31484

www.securitytracker.com/id?1020954

www.vupen.com/english/advisories/2008/2702

exchange.xforce.ibmcloud.com/vulnerabilities/45507

6.3 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2008-4676

nvd2 cvelist2 prion2 cve1