Citrix XenServer Credentials Local Information Disclosure Vulnerability

Bugtraq ID:	47804
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	May 11 2011 12:00AM
Updated:	May 11 2011 12:00AM
Credit:	Citrix
Vulnerable:	Citrix XenServer 5.6
Not Vulnerable:	Citrix XenServer 5.6 SP2 Citrix XenServer 5.6 Feature Pack 1

Citrix XenServer Credentials Local Information Disclosure Vulnerability

Citrix XenServer is prone to a local information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks.

Citrix XenServer version 5.6 is affected.

Citrix XenServer Credentials Local Information Disclosure Vulnerability

Attackers require local interactive access to exploit this issue.

Citrix XenServer Credentials Local Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

Citrix XenServer Credentials Local Information Disclosure Vulnerability

References:

• Citrix XenServer Homepage (Citrix)
  
• Vulnerability in Citrix XenServer 5.6 could result in credential disclosure (Citrix )