CVE-2008-3290
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.04 Low
EPSS
Percentile
92.2%
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS version.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| emc_dantz:retrospect_backup_client | emc dantz retrospect backup client | eq | 7.5.116 |
References
kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639
secunia.com/advisories/31186
securityreason.com/securityalert/4024
www.fortiguardcenter.com/advisory/FGA-2008-16.html
www.securityfocus.com/archive/1/494564/100/0/threaded
www.securityfocus.com/bid/30306
www.vupen.com/english/advisories/2008/2150/references
exchange.xforce.ibmcloud.com/vulnerabilities/43928
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.04 Low
EPSS
Percentile
92.2%