Description
EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.
References
- retrospect-passwordhash-info-disclosure(43930) vdb-entry
- 30308 vdb-entry
- 4025 third-party-advisory
- 20080721 EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability mailing-list
- http://kb.dantz.com/display/2/articleDirect/index.asp?aid=9692&r=0.5160639
- ADV-2008-2150 vdb-entry
- http://www.fortiguardcenter.com/advisory/FGA-2008-16.html
- 31186 third-party-advisory