Vulnerabilities > Citrix > Presentation Server > 4.0

DATE CVE VULNERABILITY TITLE RISK
2008-10-22 CVE-2008-4676 Permissions, Privileges, and Access Controls vulnerability in Citrix Access Essentials, Presentation Server and Xenapp
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file.
local
low complexity
citrix CWE-264
6.8
2008-05-18 CVE-2008-2299 Cryptographic Issues vulnerability in Citrix products
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
network
low complexity
microsoft citrix CWE-310
5.0
2006-07-24 CVE-2006-3779 Privilege Escalation vulnerability in Citrix products
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.
network
low complexity
citrix
6.5
2002-12-31 CVE-2002-2426 Cross-Site Request Forgery (CSRF) vulnerability in Citrix products
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection.
network
citrix CWE-352
4.3