CVE-2008-4676

EUVD-2008-4656
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file.  NOTE: this might be the same issue as CVE-2008-3485, but the vendor advisory is too vague to be certain.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Affected Products (NVD)
VendorProductVersion
citrixaccess_essentials
1.0
citrixaccess_essentials
1.5
citrixaccess_essentials
2.0
citrixpresentation_server
4.0
citrixxenapp
𝑥
≤ 4.5
citrixxenapp
4.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32017
http://support.citrix.com/article/CTX116310
http://www.securityfocus.com/bid/31484
http://www.securitytracker.com/id?1020954
http://www.vupen.com/english/advisories/2008/2702
https://exchange.xforce.ibmcloud.com/vulnerabilities/45507
http://secunia.com/advisories/32017
http://support.citrix.com/article/CTX116310
http://www.securityfocus.com/bid/31484
http://www.securitytracker.com/id?1020954
http://www.vupen.com/english/advisories/2008/2702
https://exchange.xforce.ibmcloud.com/vulnerabilities/45507