EUVD-2008-2297

Malware in sbrugna...

CVE-2008-5107: Exposure of Sensitive Information to an Unauthorized Actor

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

CVE-2008-2300: Undefined Security Weakness

Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors...