CVE-2008-3288

The CVE-2008-3288 entry documents that the Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a weak hash algorithm for password hashing, enabling context-dependent attackers to recover passwords. This is a network-vector issue with partial confidentiality impact and ...

CVE-2008-3287

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via malformed packets to TCP port 497, which trigger a NULL pointer dereference...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3289

CVE-2008-3289 affects EMC Dantz Retrospect Backup Client 7.5.116, where the password hash is sent in cleartext at an unspecified point, enabling remote disclosure of sensitive information via crafted packets. Connected sources (NVD and related advisories) confirm the unencrypted password hash tra...

CVE-2008-3290

CVE-2008-3290 affects EMC Dantz Retrospect Backup Client 7.5.116 (retroclient.exe). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a sequence of long packets containing 0x00 characters to TCP port 497, triggering memory corruption. This is describ...

CVE-2008-3287

CVE-2008-3287: retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 is vulnerable to remote denial of service due to a NULL pointer dereference triggered by malformed packets sent to TCP port 497. This results in a daemon crash. The available public details specify the affected software ...

CVE-2008-3288

The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which makes it easier for context-dependent attackers to recover passwords...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

emc-sql.txt

adMERITia Vulnerability Report Vulnerability Information Vendor: EMC² Product: Centera Universal Access Version: CUA4.04735.p4 Vulnerability Type: Software Flaw Vulnerability: SQL Injection Impact: Attacker can bypass the authentication method and will be logged in as an arbitrary user. With...

EMC Centera Universal Access 4.0_4735.p4 - Username SQL Injection

EMC Centera Universal Access 4.04735.p4 - Username SQL Injection source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacke...

EMC Retrospect客户端retroclient.exe远程内存破坏漏洞

BUGTRAQ ID: 30306 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect的retroclient.exe进程默认监听于TCP 497端口。如果向该端口连续发送长度为2064字节内容为0x00的报文的话，在30秒到5分钟后状态框会显示：Client networking not available, or service not running。继续发送报文会导致retroclient.exe进程终止，完全损失备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC ---...

EMC Retrospect客户端空指针引用漏洞

BUGTRAQ ID: 30313 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect处理畸形格式的请求数据时存在漏洞，如果向Retrospect客户端的TCP 497端口发送了畸形报文的话，就会触发空指针引用，导致读访问破坏，客户端会终止，无法继续备份服务。 EMC Retrospect for Windows Client 7.5.116 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.emcinsignia.com/updates...

EMC Retrospect弱哈希算法口令泄露漏洞

BUGTRAQ ID: 30319,30308 EMC Retrospect是Windows平台下的备份和恢复软件。 Retrospect备份客户端在网络中以明文传输口令哈希。如果远程攻击者向客户端发送了恶意报文的话，客户端的响应信息中就会包含有明文口令，导致损失保密性；此外Retrospect备份服务器的认证模块使用了弱口令哈希算法，攻击者可以较容易的暴力猜测。 EMC Retrospect for Windows 7.5.508 EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

EMC Centera Universal Access 4.0_4735.p4 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploi...

[Full-disclosure] EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

EMC Retrospect Backup Client Version Detection

Binary data 4599.prm...

EMC Retrospect Server Detection (deprecated)

Binary data 4600.prm...

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability...

FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect Backup Server 7.5.508 -- Vulnerability...

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...