Detections
Analytics
Citrix Presentation Server 4.5 Multiple Vulnerabilities
medium Nessus Plugin ID 69129
Language:
Synopsis
The remote host has a virtualization application installed that is affected by multiple vulnerabilities.Description
The version of Citrix Presentation Server installed on the remote Windows host is potentially affected by multiple vulnerabilities :- The application can cause clients to use weaker encryption settings than configured by the administrator, which could allow attackers to bypass intended restrictions. (CVE-2008-2299)
- It is possible for remote, authenticated users to access unauthorized desktops via unknown attack vectors.
(CVE-2008-2300)
Solution
Apply the patch referenced in the Citrix advisory.See Also
Plugin Details
Severity: Medium
ID: 69129
File Name: citrix_presentation_server_ctx116289.nasl
Version: 1.8
Type: local
Agent: windows
Family: Windows
Published: 7/30/2013
Updated: 7/6/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 4.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:citrix:presentation_server
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Patch Publication Date: 5/13/2008
Vulnerability Publication Date: 5/13/2008
Reference Information
CVE: CVE-2008-2299, CVE-2008-2300