EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service (client termination and loss of backup service) via a malformed packet to TCP port 497, which triggers an assert error.

According to its version number, the installed instance of Retrospect Client for Windows reportedly will stop working if it receives a packet starting with a specially-crafted sequence of bytes.  An unauthenticated remote attacker may be able to leverage this flaw to prevent the affected host from being backed up.

According to its version number, the installed instance of Retrospect Client for Windows reportedly will stop working if it receives a packet starting with a specially crafted sequence of bytes.  An unauthenticated, remote attacker may be able to leverage this flaw to prevent the affected host from being backed up.

ID	Name	Product	Family	Severity
3461	Retrospect Client < 6.5.138 / 7.0.109 Malformed Packet DoS	Nessus Network Monitor	Generic	medium
3460	Retrospect Client for Windows Malformed Packet DoS	Nessus Network Monitor	Generic	medium
3459	Retrospect Client for Windows Malformed Packet DoS	Nessus Network Monitor	Generic	medium
20996	Retrospect Client Malformed Packet DoS	Nessus	Misc.	medium

Detections

Analytics

CVE-2006-0995

high

Tenable Plugins

medium

medium

medium

medium