Memory corruption

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3287

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...

Authentication flaw

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-3288

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords...

CVE-2008-3287

CVE-2008-3287: retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 is vulnerable to remote denial of service due to a NULL pointer dereference triggered by malformed packets sent to TCP port 497. This results in a daemon crash. The available public details specify the affected software ...

CVE-2008-3289

CVE-2008-3289 affects EMC Dantz Retrospect Backup Client 7.5.116, where the password hash is sent in cleartext at an unspecified point, enabling remote disclosure of sensitive information via crafted packets. Connected sources (NVD and related advisories) confirm the unencrypted password hash tra...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3288

The CVE-2008-3288 entry documents that the Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a weak hash algorithm for password hashing, enabling context-dependent attackers to recover passwords. This is a network-vector issue with partial confidentiality impact and ...

CVE-2008-3290

CVE-2008-3290 affects EMC Dantz Retrospect Backup Client 7.5.116 (retroclient.exe). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a sequence of long packets containing 0x00 characters to TCP port 497, triggering memory corruption. This is describ...

CVE-2008-3287

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...

PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

CVE-2008-3289: Cleartext Transmission of Sensitive Information

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-3290: Undefined Security Weakness

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3287: Improper Input Validation

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...

CVE-2008-3288: Undefined Security Weakness

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords...

Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)

Binary data 4607.prm...

EMC Retrospect客户端空指针引用漏洞

BUGTRAQ ID: 30313 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect处理畸形格式的请求数据时存在漏洞，如果向Retrospect客户端的TCP 497端口发送了畸形报文的话，就会触发空指针引用，导致读访问破坏，客户端会终止，无法继续备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.emcinsignia.com/updates...

EMC Retrospect弱哈希算法口令泄露漏洞

BUGTRAQ ID: 30319,30308 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect备份客户端在网络中以明文传输口令哈希。如果远程攻击者向客户端发送了恶意报文的话，客户端的响应信息中就会包含有明文口令，导致损失保密性；此外Retrospect备份服务器的认证模块使用了弱口令哈希算法，攻击者可以较容易的暴力猜测。 EMC Retrospect for Windows 7.5.508 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...