Citrix XenServer Local Privilege Escalation Vulnerability

Release date: 2012-09-05
Updated on:

Affected Systems:
Citrix XenServer 6.0
Citrix XenServer 5.x
Citrix XenServer 4.1
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-4606

Citrix XenServer product line is an enterprise-level platform for managing server virtualization in a data center through flexible aggregation of computing and storage resources.

Citrix XenServer has the Local Privilege Escalation Vulnerability. Local attackers who can access the client operating system can exploit this vulnerability to gain privilege escalation on the affected computers.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Citrix
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.citrix.com/