Lucene search

MitreCVE-2008-3289

HistoryJul 24, 2008 - 5:41 p.m.

CVE-2008-3289

2008-07-2417:41:00

CWE-319

mitre

web.nvd.nist.gov

emc

dantz

retrospect

backup

client

7.5.116

password hash

disclosure

remote attackers

sensitive information

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.007

Percentile

80.1%

JSON

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

Affected configurations

Nvd

Node

storcentricretrospect_backup_clientMatch7.5.116-

VendorProductVersionCPE
storcentricretrospect_backup_client7.5.116cpe:2.3:a:storcentric:retrospect_backup_client:7.5.116:*:*:*:*:-:*:*

Vendor	Product	Version	CPE
storcentric	retrospect_backup_client	7.5.116	cpe:2.3:a:storcentric:retrospect_backup_client:7.5.116:::::-::

References

kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

secunia.com/advisories/31186

securityreason.com/securityalert/4025

www.fortiguardcenter.com/advisory/FGA-2008-16.html

www.securityfocus.com/archive/1/494560/100/0/threaded

www.securityfocus.com/bid/30308

www.vupen.com/english/advisories/2008/2150/references

exchange.xforce.ibmcloud.com/vulnerabilities/43930

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.007

Percentile

80.1%

JSON

Related for CVE-2008-3289