CVE-2008-3289

HIGH 7.5CVE-2008-3289 · Published 24/07/2008 · updated 16/06/2026

In short

CVE-2008-3289 is a HIGH (CVSS 7.5) vulnerability affecting retrospect backup client (storcentric).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
retrospect backup client storcentric	`= 7.5.116`	No fix yet

Description

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

References

kb.dantz.com/display/2/articleDirect/index.asp · Broken Link
secunia.com/advisories/31186 · Broken Link
securityreason.com/securityalert/4025 · Third Party Advisory
fortiguardcenter.com/advisory/FGA-2008-16.html · Broken Link
securityfocus.com/archive/1/494560/100/0/threaded · Broken Link
securityfocus.com/bid/30308 · Broken Link
vupen.com/english/advisories/2008/2150/references · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/43930 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free