EUVD-2008-3275

Malware in sbrugna...

Retrospect Backup Client Brute Force Vulnerability

Retrospect Backup Client is a client for web-based backup tools. A security vulnerability exists in Retrospect Backup Client that allows a remote attacker to obtain passwords by performing a brute force attack...

Retrospect Backup Client uses weak password hashing

Overview Retrospect Backup Client is a client to a network-based backup utility. This client stores passwords in a hashed format that is weak and susceptible to collision, allowing an attacker to generate a password hash collision and gain access to the target's backup files. Description CWE-916:...

Default credentials

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

Memory corruption

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3287

CVE-2008-3287: retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 is vulnerable to remote denial of service due to a NULL pointer dereference triggered by malformed packets sent to TCP port 497. This results in a daemon crash. The available public details specify the affected software ...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3290

CVE-2008-3290 affects EMC Dantz Retrospect Backup Client 7.5.116 (retroclient.exe). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a sequence of long packets containing 0x00 characters to TCP port 497, triggering memory corruption. This is describ...

CVE-2008-3289: Cleartext Transmission of Sensitive Information

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

CVE-2008-3290: Undefined Security Weakness

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3287: Improper Input Validation

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...

Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)

According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities : - An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially crafted packets, although only when an...

EMC Retrospect Backup Client Version Detection

Binary data 4599.prm...

Retrospect Client Detection

The remote host is running a Retrospect backup client. Retrospect is a commercial backup product from EMC / Dantz. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid20995; scriptversion"1.17";...