CVE-2008-3485 Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix metaframe presentation server | <= 3.0 | No fix listed |
| citrix xp | <= 1.0 | No fix listed |
References
- 4110 third-party-advisory
- 20080730 Citrix MetaFrame Privilege Escalation mailing-list
- 30446 vdb-entry
- citrix-metaframe-icabar-privilege-escalation(44490) vdb-entry