CVE-2008-3288

EMC Dantz Retrospect Backup Server 7.5.508 - Info Disclosure

Title source: llm

Description

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords.

References (9)

Core 9

Core References

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30319

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/494636/100/0/threaded

Various Sources x_refsource_confirm

http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/4026

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43935

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2150/references

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020534

Vendor Advisory x_refsource_misc

http://www.fortiguardcenter.com/advisory/FGA-2008-16.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31186

Scores

EPSS 0.0060

EPSS Percentile 69.8%

Details

CWE

CWE-310

Status published

Products (1)

emc/dantz_retrospect_backup_server 7.5.508

Published Jul 24, 2008

Tracked Since Feb 18, 2026