Executive Summary

Informations
Name CVE-2008-1431 First vendor Publication 2008-03-20
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 2.1 Attack Range Local
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1431

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-310 Cryptographic Issues

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 1

Open Source Vulnerability Database (OSVDB)

Id Description
43440 RaidSonic ICY BOX NAS-4220-B Plaintext Encryption Key Disclosure

Sources (Detail)

http://secunia.com/advisories/29401
http://securityreason.com/securityalert/3760
http://www.securityfocus.com/archive/1/489690/100/0/threaded
http://www.securityfocus.com/bid/28264
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
Date Informations
2024-11-28 23:14:46
  • Multiple Updates
2024-11-28 12:15:15
  • Multiple Updates
2020-05-23 00:21:28
  • Multiple Updates
2018-10-12 00:20:17
  • Multiple Updates
2016-06-28 17:12:55
  • Multiple Updates
2016-04-26 17:14:52
  • Multiple Updates
2013-05-11 00:13:14
  • Multiple Updates