Login Request a demo
Unscored severity · published May 18, 2008
CVE-2008-2299
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Access Essentials · Citrix
through 2.0 · source: NVD
DS
Desktop Server · Citrix
1.0 · source: NVD
PS
Presentation Server · Citrix
through 4.5 · source: NVD
Affected product
AE
Access Essentials
Citrix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2299
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2299
Vendor Advisory
http://secunia.com/advisories/30271
Patch
http://support.citrix.com/article/CTX114893
www.securityfocus.com
http://www.securityfocus.com/bid/29233
Patch
http://www.securitytracker.com/id?1020026
www.vupen.com
http://www.vupen.com/english/advisories/2008/1531/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42444
More from Access Essentials
–
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows…
–
CVE-2008-2300
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users…
–
CVE-2008-0356
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and…
–
CVE-2007-2850
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass…
–
CVE-2002-2426
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote…