CVE-2008-3289 EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.
HighCVSS 7.5
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| storcentric retrospect backup client | = 7.5.116 | No fix listed |
References
- kb.dantz.com broken-link
- 31186 broken-link patch third-party-advisory vendor-advisory
- 4025 third-party-advisory
- www.fortiguardcenter.com broken-link patch
- 20080721 EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- 30308 broken-link patch third-party-advisory vdb-entry
- ADV-2008-2150 broken-link vdb-entry
- retrospect-passwordhash-info-disclosure(43930) third-party-advisory vdb-entry