CVEvulnerability
CVE-2015-2864
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Retrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and before 10.0.2.104 on Linux improperly generate password hashes, which makes it easier for remote attackers to bypass authentication and obtain access to backup files by leveraging a collision.
Affected configurations
• retrospect retrospect 10.0.2
• retrospect retrospect 12.0.2
• retrospect retrospect client 10.0.2
• retrospect retrospect client 12.0.2
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/101500 Third Party Advisory, US Government Resource
- http://www.retrospect.com/support/kb/cve_2015_2864 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75201 www.securityfocus.com
- http://www.securitytracker.com/id/1033948 www.securitytracker.com
- https://www.youtube.com/watch?v=MB8AL5u7JCA Exploit
- http://www.kb.cert.org/vuls/id/101500 Third Party Advisory, US Government Resource
- http://www.retrospect.com/support/kb/cve_2015_2864 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75201 www.securityfocus.com
- http://www.securitytracker.com/id/1033948 www.securitytracker.com
- https://www.youtube.com/watch?v=MB8AL5u7JCA Exploit