CVE-2008-3671 Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this i...

MediumCVSS 5.0 EPSS 1.6%

Published: 2008-08-13 22:00
Updated: 2026-06-17 01:56
Exploit status: No public exploit known

Description

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Product	Affected versions	Fixed in
Acronis true image echo server	= 9.5.8072	No fix listed

References

30856 third-party-advisory vendor-advisory
30456 vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.56% (percentile 75.5)
CWE: CWE-310

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.