EMC Dantz Retrospect Backup Client Remote Denial of Service Vulnerability

Bugtraq ID:	16933
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 03 2006 12:00AM
Updated:	Mar 08 2006 06:40AM
Credit:	The discoverer of this vulnerability wishes to remain anonymous.
Vulnerable:	Dantz Retrospect Client 7 Dantz Retrospect Client 6.5
Not Vulnerable:	Dantz Retrospect Client 7.0.109 Dantz Retrospect Client 6.5.138

EMC Dantz Retrospect Backup Client Remote Denial of Service Vulnerability

Dantz Retrospect Backup Client is prone to a remote denial-of-service vulnerability. An unauthenticated, remote attacker can cause the client to fail.

This issue has been addressed in Retrospect Backup Client 6.5.138 and 7.0.109; earlier versions are vulnerable. The Apple Retrospect Backup Client is reportedly not affected.

EMC Dantz Retrospect Backup Client Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

EMC Dantz Retrospect Backup Client Remote Denial of Service Vulnerability

Solution:
This issue has been addressed in Dantz Retrospect Backup Client 7.0.109 and 6.5.138.


Dantz Retrospect Client 7

• Dantz EN-Win-Client_7_0_109.exe
  http://download.dantz.com/archives/EN-Win-Client_7_0_109.exe

Dantz Retrospect Client 6.5

• Dantz EN-Win-Client_6_5_138.exe
  http://download.dantz.com/archives/EN-Win-Client_6_5_138.exe

EMC Dantz Retrospect Backup Client Remote Denial of Service Vulnerability

References:

• Product Homepage (Dantz)
  
• Retrospect Client Security Update (Dantz)