CVE-2008-3289

7.5 HIGH

Published: July 24, 2008 Modified: April 23, 2026

Description

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31186

Source: cve@mitre.org

Broken Link Patch Vendor Advisory

http://securityreason.com/securityalert/4025

Source: cve@mitre.org

Third Party Advisory

http://www.fortiguardcenter.com/advisory/FGA-2008-16.html

Source: cve@mitre.org

Broken Link Patch

http://www.securityfocus.com/archive/1/494560/100/0/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/30308

Source: cve@mitre.org

Broken Link Patch Third Party Advisory VDB Entry

http://www.vupen.com/english/advisories/2008/2150/references

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/43930

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639