CVE-2008-5107

Currently unrated

Key Information:

Vendor
Citrix
Status
Desktop Server
Presentation Server
Vendor
CVE Published:
17 November 2008

Summary

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

References

http://support.citrix.com/article/CTX116228
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2008/0705/references
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/28047
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.