Citrix Presentation Server Lets Remote Authenticated Users Access Desktop Session Without Permission
|
|
SecurityTracker Alert ID: 1020027 |
|
SecurityTracker URL: http://securitytracker.com/id/1020027
|
|
CVE Reference:
CVE-2008-2300
(Links to External Site)
|
Updated: May 22 2008
|
Original Entry Date: May 15 2008
|
Impact:
User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 4.5 and prior versions
|
Description:
A vulnerability was reported in Citrix Presentation Server. A remote authenticated user can access a desktop session without authorization.
A remote authenticated user can gain access to a desktop running in the context of their own account.
Citrix Access Essentials versions 2.0 and prior are also affected.
Citrix Desktop Server 1.0 is also affected.
|
Impact:
A remote authenticated user can access a desktop session without authorization to access the desktop session.
|
Solution:
The vendor has issued the following fixes.
Citrix Presentation Server 4.5 for Windows Server 2003:
EN - http://support.citrix.com/article/CTX116960
FR - http://support.citrix.com/article/CTX116962
GE - http://support.citrix.com/article/CTX116961
JA - http://support.citrix.com/article/CTX116964
ES - http://support.citrix.com/article/CTX116963
Citrix Presentation Server 4.5 for Windows Server 2003 x64 Editions:
EN - http://support.citrix.com/article/CTX116954
FR - http://support.citrix.com/article/CTX116956
GE - http://support.citrix.com/article/CTX116957
JA - http://support.citrix.com/article/CTX116959
ES - http://support.citrix.com/article/CTX116958
Citrix Presentation Server 4.0 for Windows 2000 Server:
EN - http://support.citrix.com/article/CTX116521
FR - http://support.citrix.com/article/CTX116522
GE - http://support.citrix.com/article/CTX116528
JA - http://support.citrix.com/article/CTX116529
ES - http://support.citrix.com/article/CTX116527
Citrix Presentation Server 4.0 for Windows Server 2003:
EN - http://support.citrix.com/article/CTX116008
FR - http://support.citrix.com/article/CTX116523
GE - http://support.citrix.com/article/CTX116111
JA - http://support.citrix.com/article/CTX116009
ES - http://support.citrix.com/article/CTX116524
Citrix Access Essentials 2.0:
EN - http://support.citrix.com/article/CTX116960
FR - http://support.citrix.com/article/CTX116962
GE - http://support.citrix.com/article/CTX116961
JA - http://support.citrix.com/article/CTX116964
ES - http://support.citrix.com/article/CTX116963
Citrix Access Essentials 1.5:
EN - http://support.citrix.com/article/CTX116008
FR - http://support.citrix.com/article/CTX116523
GE - http://support.citrix.com/article/CTX116111
JA - http://support.citrix.com/article/CTX116009
ES - http://support.citrix.com/article/CTX116524
Citrix Access Essentials 1.0:
EN - http://support.citrix.com/article/CTX116008
FR - http://support.citrix.com/article/CTX116523
GE - http://support.citrix.com/article/CTX116111
JA - http://support.citrix.com/article/CTX116009
ES - http://support.citrix.com/article/CTX116524
Citrix Desktop Server 1.0 for Windows Server 2003:
EN - http://support.citrix.com/article/CTX116548
Citrix Desktop Server 1.0 for Windows Server 2003 x64 Editions:
EN - http://support.citrix.com/article/CTX116549
The vendor's advisory is available at:
http://support.citrix.com/article/CTX116941
|
Vendor URL: support.citrix.com/article/CTX116941 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Windows (2003)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 14 May 2008 22:17:25 -0400
Subject: Citrix Presentation Server
|
http://support.citrix.com/article/CTX116941
|
|
