Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)

Medium Nessus Plugin ID 33561


The remote backup client is affected by multiple vulnerabilities.


According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities :

- An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially crafted packets, although only when an English client is used on a Chinese operating system, which is not a supported configuration.

- The password hash is sent over the network unencrypted, which could result in its disclosure.

- A NULL pointer dereference error may lead to a denial of service condition.


Upgrade to the latest version of Retrospect Client software and verify it is at least 6.2.229 (Macintosh) / 7.6.106 (Windows) / 7.6.100 (Red Hat Linux or Solaris).

See Also

Plugin Details

Severity: Medium

ID: 33561

File Name: retrospect_client_esa_08_009.nasl

Version: $Revision: 1.12 $

Type: remote

Family: Misc.

Published: 2008/07/23

Modified: 2016/12/09

Dependencies: 20995, 11936

Risk Information

Risk Factor: Medium


Base Score: 5

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

CVE: CVE-2008-3287, CVE-2008-3289, CVE-2008-3290

BID: 30306, 30308, 30313

OSVDB: 47504, 47506, 47507

Secunia: 31186

CWE: 20, 200, 399