EUVD-2008-3275

Malware in sbrugna...

Retrospect Backup Client Brute Force Vulnerability

Retrospect Backup Client is a client for web-based backup tools. A security vulnerability exists in Retrospect Backup Client that allows a remote attacker to obtain passwords by performing a brute force attack...

Retrospect Backup Client uses weak password hashing

Overview Retrospect Backup Client is a client to a network-based backup utility. This client stores passwords in a hashed format that is weak and susceptible to collision, allowing an attacker to generate a password hash collision and gain access to the target's backup files. Description CWE-916:...

EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)

The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...

Default credentials

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

Memory corruption

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3290

retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service daemon crash via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption, probably involving an English product version on a Chinese OS...

CVE-2008-3288

The CVE-2008-3288 entry documents that the Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a weak hash algorithm for password hashing, enabling context-dependent attackers to recover passwords. This is a network-vector issue with partial confidentiality impact and ...

CVE-2008-3290

CVE-2008-3290 affects EMC Dantz Retrospect Backup Client 7.5.116 (retroclient.exe). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a sequence of long packets containing 0x00 characters to TCP port 497, triggering memory corruption. This is describ...

CVE-2008-3287

CVE-2008-3287: retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 is vulnerable to remote denial of service due to a NULL pointer dereference triggered by malformed packets sent to TCP port 497. This results in a daemon crash. The available public details specify the affected software ...

PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)

Binary data 4607.prm...

Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)

Binary data 4606.prm...

Retrospect Backup Server Authentication Module Password Hash Weakness (ESA-08-009)

According to its version number, the Authentication Module in the Retrospect Backup Server installed on the remote host uses a weak hash algorithm to hash a user's password, which could allow a remote attacker to gain control of a client's machine. C Tenable Network Security, Inc...

Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)

According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities : - An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially crafted packets, although only when an...

EMC Retrospect Backup Client Version Detection

Binary data 4599.prm...

EMC Dantz Retrospect backup agent DoS

Invalid packet to TCP/497 port causes service to fail...

Retrospect Client Detection

The remote host is running a Retrospect backup client. Retrospect is a commercial backup product from EMC / Dantz. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid20995; scriptversion"1.17";...