CVE-2008-3289

Published: Jul 24, 2008Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

Affected (1)

Products: Storcentric: Retrospect Backup Client

Storcentric

1 product

Retrospect Backup Client

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Storcentric Retrospect Backup Client	Version 7.5.116

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (16)

http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31186

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://securityreason.com/securityalert/4025

Source: cve@mitre.org

Third Party Advisory

http://www.fortiguardcenter.com/advisory/FGA-2008-16.html

Source: cve@mitre.org

Broken LinkPatch

http://www.securityfocus.com/archive/1/494560/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/30308

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/2150/references

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/43930

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639