Unscored severity · published Nov 17, 2008
CVE-2008-5107
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Desktop Server · Citrix
1.0 · source: NVD
PS
Presentation Server · Citrix
4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5107
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5107
Vendor Advisory
http://support.citrix.com/article/CTX116228
Third Party Advisory
http://www.securityfocus.com/bid/28047
Permissions Required
http://www.vupen.com/english/advisories/2008/0705/references
More from Desktop Server
–
CVE-2008-2299
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause…
–
CVE-2008-2300
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users…
–
CVE-2008-0356
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and…