Vulnerabilities > Citrix > Desktop Server > 1.0

DATE CVE VULNERABILITY TITLE RISK
2008-11-17 CVE-2008-5107 Information Exposure vulnerability in Citrix Desktop Server and Presentation Server
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
local
citrix CWE-200
1.9
2008-05-18 CVE-2008-2300 Permissions, Privileges, and Access Controls vulnerability in Citrix products
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.
network
low complexity
citrix CWE-264
6.5
2008-05-18 CVE-2008-2299 Cryptographic Issues vulnerability in Citrix products
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
network
low complexity
microsoft citrix CWE-310
5.0
2008-01-18 CVE-2008-0356 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Citrix products
Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513.
network
low complexity
citrix CWE-119
critical
10.0