PT-2008-4694 · Emc · Emc Dantz Retrospect Backup Server

Zhenhua Liu · Publicado 2008-07-24 · Atualizado 2018-10-11 · CVE-2008-3288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Server version 7.5.508

Description: The issue concerns the Server Authentication Module, which utilizes a weak hash algorithm. This weakness makes it easier for attackers to recover passwords, particularly in context-dependent attacks.

Recommendations: For version 7.5.508, consider updating to a newer version that addresses the weak hash algorithm issue, as this would strengthen password security and mitigate the risk of password recovery by attackers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-3288

Produtos afetados

Emc Dantz Retrospect Backup Server

Referências · 10

• http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639 · Nota
• http://vupen.com/english/advisories/2008/2150/references · Nota
• http://securitytracker.com/id?1020534 · Nota
• http://securityreason.com/securityalert/4026 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3288 · Nota de Segurança
• http://fortiguardcenter.com/advisory/FGA-2008-16.html · Nota
• http://securityfocus.com/bid/30319 · Correção
• http://secunia.com/advisories/31186 · Aviso do Fabricante
• http://securityfocus.com/archive/1/494636/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43935 · Nota