CVE-2008-3288

2008-07-2417:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a “weak hash algorithm,” which makes it easier for context-dependent attackers to recover passwords.

References

kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

secunia.com/advisories/31186

securityreason.com/securityalert/4026

www.fortiguardcenter.com/advisory/FGA-2008-16.html

www.securityfocus.com/archive/1/494636/100/0/threaded

www.securityfocus.com/bid/30319

www.securitytracker.com/id?1020534

www.vupen.com/english/advisories/2008/2150/references

exchange.xforce.ibmcloud.com/vulnerabilities/43935