Citrix Presentation Server Unspecified Local Privilege Escalation Vulnerability

Bugtraq ID:	31484
Class:	Unknown
CVE:	CVE-2008-4676
Remote:	No
Local:	Yes
Published:	Sep 29 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	Citrix
Vulnerable:	Citrix XenApp 4.5 Feature Pack 1 Citrix XenApp 4.5 Citrix Presentation Server 4.0 Citrix Presentation Server 4.5 Citrix Access Essentials 2.0 Citrix Access Essentials 1.5 Citrix Access Essentials 1.0
Not Vulnerable:

Citrix Presentation Server Unspecified Local Privilege Escalation Vulnerability

Citrix Presentation Server is prone to a privilege-escalation vulnerability caused by an unspecified error.

Local attackers can leverage this issue to gain escalated privileges. Successful exploits may compromise affected computers.

The following products are vulnerable:

Citrix XenApp (formerly Presentation Server) 4.5, including Feature Pack 1
Citrix Presentation Server 4.0
Citrix Access Essentials 2.0, 1.5 and 1.0

Citrix Presentation Server Unspecified Local Privilege Escalation Vulnerability

Attackers will likely exploit this issue using standard tools and commands.

Citrix Presentation Server Unspecified Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

Citrix Presentation Server Unspecified Local Privilege Escalation Vulnerability

References:

• Citrix Homepage (Citrix)
  
• CTX116310: Vulnerability in Citrix Presentation Server for Windows (Citrix)