Unscored severity · published May 18, 2008
CVE-2008-2300
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Access Essentials · Citrix
through 2.0; 1.0; 1.5 · source: NVD
CP
Citrix Presentation Server · Citrix
through 4.5 · source: NVD
DS
Desktop Server · Citrix
1.0 · source: NVD
MP
Metaframe Presentation Server · Citrix
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2300
Vendor Advisory
http://secunia.com/advisories/30271
support.citrix.com
http://support.citrix.com/article/CTX116941
www.securityfocus.com
http://www.securityfocus.com/bid/29232
www.securitytracker.com
http://www.securitytracker.com/id?1020027
www.vupen.com
http://www.vupen.com/english/advisories/2008/1530/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42439
More from Access Essentials
–
CVE-2008-4676
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows…
–
CVE-2008-2299
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause…
–
CVE-2008-0356
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and…
–
CVE-2007-2850
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass…
–
CVE-2002-2426
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote…