CVE-2008-4676 - Vulnerability Details - OpenCVE

Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Citrix	Access Essentials Presentation Server Xenapp

Configuration 1 [-]

OR	cpe:2.3:a:citrix:access_essentials:1.0:::::::*
	cpe:2.3:a:citrix:access_essentials:1.5:::::::*
	cpe:2.3:a:citrix:access_essentials:2.0:::::::*
	cpe:2.3:a:citrix:presentation_server:4.0:::::::*
	cpe:2.3:a:citrix:xenapp::fp1::::::*
	cpe:2.3:a:citrix:xenapp:4.5:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/32017
http://support.citrix.com/article/CTX116310
http://www.securityfocus.com/bid/31484
http://www.securitytracker.com/id?1020954
http://www.vupen.com/english/advisories/2008/2702
https://exchange.xforce.ibmcloud.com/vulnerabilities/45507

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-10-22T10:00:00

Updated: 2024-08-07T10:24:20.714Z

Reserved: 2008-10-21T00:00:00

Link: CVE-2008-4676

Vulnrichment

No data.

NVD

Status : Modified

Published: 2008-10-22T10:30:01.660

Modified: 2024-11-21T00:52:15.650

Link: CVE-2008-4676

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-09-29T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://support.citrix.com/article/CTX116310"}, {"name": "31484", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/31484"}, {"name": "1020954", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020954"}, {"name": "citrix-server-unspecified-priv-escalation(45507)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45507"}, {"name": "32017", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32017"}, {"name": "ADV-2008-2702", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2702"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-4676", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://support.citrix.com/article/CTX116310", "refsource": "CONFIRM", "url": "http://support.citrix.com/article/CTX116310"}, {"name": "31484", "refsource": "BID", "url": "http://www.securityfocus.com/bid/31484"}, {"name": "1020954", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020954"}, {"name": "citrix-server-unspecified-priv-escalation(45507)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45507"}, {"name": "32017", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32017"}, {"name": "ADV-2008-2702", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2702"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T10:24:20.714Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.citrix.com/article/CTX116310"}, {"name": "31484", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/31484"}, {"name": "1020954", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1020954"}, {"name": "citrix-server-unspecified-priv-escalation(45507)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45507"}, {"name": "32017", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/32017"}, {"name": "ADV-2008-2702", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/2702"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-4676", "datePublished": "2008-10-22T10:00:00", "dateReserved": "2008-10-21T00:00:00", "dateUpdated": "2024-08-07T10:24:20.714Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:citrix:access_essentials:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "2FF9F197-991D-4920-BE9A-2E3495E76CD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:access_essentials:1.5:*:*:*:*:*:*:*", "matchCriteriaId": "21B89150-1806-481D-B0D9-FD37BA4798D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:access_essentials:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "D04505CA-D715-4094-9B39-61FA8BDB3A4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:presentation_server:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "967F31B0-0299-4BCE-91E5-45E2B38CFCE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:xenapp:*:fp1:*:*:*:*:*:*", "matchCriteriaId": "60589E82-E176-4C0C-9034-B3E5C1F6B3D6", "versionEndIncluding": "4.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:xenapp:4.5:*:*:*:*:*:*:*", "matchCriteriaId": "8FBAEA3D-7E35-4C89-B416-8CDEB3286253", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Citrix XenApp (formalmente Presentation Server) 4.5 Feature Pack 1 y versiones anteriores, Presentation Server 4.0, y Access Essentials 1.0, 1.5, y 2.0 permite a los usuarios locales obtener privilegios a trav\u00e9s de vectores de ataque desconocidos relativos a la creaci\u00f3n de un archivo no especificado. NOTA: esto deber\u00eda de ser el mismo asunto que CVE-2008-3485, pero el anuncio del vendedor es tan impreciso como para ser cierto."}], "id": "CVE-2008-4676", "lastModified": "2024-11-21T00:52:15.650", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-10-22T10:30:01.660", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/32017"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.citrix.com/article/CTX116310"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/31484"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020954"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2702"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45507"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/32017"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.citrix.com/article/CTX116310"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/31484"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1020954"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/2702"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45507"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}, {"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}