CVE-2008-5107: Infoleak
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5107?
CVE-2008-5107 has a moderate severity rating, primarily affecting local users' ability to access sensitive database credentials.
How do I fix CVE-2008-5107?
To fix CVE-2008-5107, disable MSI logging during the installation of Citrix Presentation Server 4.5 and Desktop Server 1.0 to prevent credential exposure.
Which versions are affected by CVE-2008-5107?
CVE-2008-5107 affects Citrix Presentation Server 4.5 and Desktop Server 1.0.
What kind of information is exposed in CVE-2008-5107?
CVE-2008-5107 exposes sensitive database credentials through MSI log files.
Can local users exploit CVE-2008-5107?
Yes, local users can exploit CVE-2008-5107 by reading the MSI log files to obtain database credentials.