Secunia

A vulnerability has been reported in EMC Retrospect Client, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is cause due to a boundary error within the handling of certain received packets. This can be exploited to cause a buffer overflow via a specially crafted packet sent to port 497.

The vulnerability has been reported in the following versions:
Retrospect Client for Windows version 6.5, 7.0, and 7.5.
Retrospect Client for Macintosh version 5.1 and 6.1.
Retrospect Client for Linux version 6.5, 7.0, and 7.5.
Retrospect Client for Solaris version 6.5, 7.0, and 7.5.
Retrospect Client for NetWare 1.0.

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits:
* Nicolas Pouvesle, Tenable Software.
* Stanka Šalamun and Luka Treiber, Acros Security.

Changelog
Further details available in Customer Area

Original Advisory
EMC:
http://kb.dantz.com/article.asp?article=9511&p=2

Acros Security:
http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area