PT-2008-4694 · Emc · Emc Dantz Retrospect Backup Server

Zhenhua Liu · Published 2008-07-24 · Updated 2018-10-11 · CVE-2008-3288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Server version 7.5.508

Description: The issue concerns the Server Authentication Module, which utilizes a weak hash algorithm. This weakness makes it easier for attackers to recover passwords, particularly in context-dependent attacks.

Recommendations: For version 7.5.508, consider updating to a newer version that addresses the weak hash algorithm issue, as this would strengthen password security and mitigate the risk of password recovery by attackers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2008-3288

Affected Products

Emc Dantz Retrospect Backup Server

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-3288 · Security Note
• http://securityfocus.com/bid/30319 · Patch
• http://secunia.com/advisories/31186 · Vendor Advisory
• http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639 · Note
• http://vupen.com/english/advisories/2008/2150/references · Note
• http://securitytracker.com/id?1020534 · Note
• http://securityreason.com/securityalert/4026 · Note
• http://fortiguardcenter.com/advisory/FGA-2008-16.html · Note
• http://securityfocus.com/archive/1/494636/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43935 · Note