Lucene search

PRIOn knowledge basePRION:CVE-2008-3288

HistoryJul 24, 2008 - 5:41 p.m.

Authentication flaw

2008-07-2417:41:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a “weak hash algorithm,” which makes it easier for context-dependent attackers to recover passwords.

CPENameOperatorVersion
dantz_retrospect_backup_servereq7.5.508

CPE	Name	Operator	Version
	dantz_retrospect_backup_server	eq	7.5.508

References

kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

secunia.com/advisories/31186

securityreason.com/securityalert/4026

www.fortiguardcenter.com/advisory/FGA-2008-16.html

www.securityfocus.com/archive/1/494636/100/0/threaded

www.securityfocus.com/bid/30319

www.securitytracker.com/id?1020534

www.vupen.com/english/advisories/2008/2150/references

exchange.xforce.ibmcloud.com/vulnerabilities/43935