Detections
Analytics
Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)
medium Nessus Network Monitor Plugin ID 4606
Synopsis
The remote backup client is affected by multiple vulnerabilities.Description
According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities :- An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially-crafted packets, although only when an English client is used on a Chinese operating system, which is not a supported configuration.
- The password hash is sent over the network unencrypted, which could result in its disclosure.
- A null pointer dereference error may lead to a denial of service condition.
Solution
Upgrade or patch according to vendor recommendations.See Also
http://www.fortiguardcenter.com/advisory/FGA-2008-16.html
http://www.securityfocus.com/archive/1/494560/30/0/threaded
http://kb.dantz.com/article.asp?article=9692&p=2
Plugin Details
Severity: Medium
ID: 4606
Family: Generic
Published: 7/23/2008
Updated: 3/6/2019
Nessus ID: 33561
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:emc_dantz:retrospect_backup_client
Reference Information
CVE: CVE-2008-3287, CVE-2008-3288, CVE-2008-3289, CVE-2008-3290