Citrix Presentation Server Authentication Bypass Vulnerability

Bugtraq ID:	29232
Class:	Access Validation Error
CVE:	CVE-2008-2300
Remote:	Yes
Local:	No
Published:	May 14 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Citrix Presentation Server 4.0 Citrix Presentation Server 4.5 Citrix MetaFrame Presentation Server 4.0 Citrix MetaFrame Presentation Server 3.0 Citrix Desktop Server 1.0 x64 Citrix Desktop Server 1.0 Citrix Access Essentials 2.0 Citrix Access Essentials 1.5 Citrix Access Essentials 1.0
Not Vulnerable:

Citrix Presentation Server Authentication Bypass Vulnerability

Citrix Presentation Server is prone to an unspecified authentication-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and gain access to unauthorized desktops.

This issue affects the following products:

Versions up to Citrix Presentation Server 4.5
Versions up to Citrix Access Essentials 2.0
Citrix Desktop Server 1.0

Citrix Presentation Server Authentication Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Citrix Presentation Server Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory along with hotfixes. Please see the references for more information.

Citrix Presentation Server Authentication Bypass Vulnerability

References:

• Citrix Homepage (Citrix)
  
• CTX116941: Vulnerability in Citrix Presentation Server could allow authenticated (Citrix)