CVE-2008-5107 The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these....
LowCVSS 1.9
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix desktop server | = 1.0 | No fix listed |
| citrix presentation server | = 4.5 | No fix listed |
References
- support.citrix.com vendor-advisory
- 28047 third-party-advisory vdb-entry
- ADV-2008-0705 permissions-required vdb-entry