CVE-2008-4676

Severity CVSS v4.0:

Pending analysis

Type:

CWE-264 Permissions, Privileges, and Access Control

Publication date:

22/10/2008

Last modified:

09/04/2025

Description

Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.

Impact

Vector 2.0

AV:L/AC:L/Au:S/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 6.80 MEDIUM
Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete

Base Score 2.0

6.80

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:citrix:access_essentials:1.0:::::::*
cpe:2.3:a:citrix:access_essentials:1.5:::::::*
cpe:2.3:a:citrix:access_essentials:2.0:::::::*
cpe:2.3:a:citrix:presentation_server:4.0:::::::*
cpe:2.3:a:citrix:xenapp::fp1::::::*		4.5 (including)
cpe:2.3:a:citrix:xenapp:4.5:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:citrix:access_essentials:1.0:::::::*
cpe:2.3:a:citrix:access_essentials:1.5:::::::*
cpe:2.3:a:citrix:access_essentials:2.0:::::::*
cpe:2.3:a:citrix:presentation_server:4.0:::::::*
cpe:2.3:a:citrix:xenapp::fp1::::::*		4.5 (including)
cpe:2.3:a:citrix:xenapp:4.5:::::::*

CVE-2008-4676

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools