Retrospect and Retrospect Client before 10.0.2.119 on Windows before 12.0.2.116 on OS X and before 10.0.2.104 on Linux improperly generate password hashes which makes it easier for remote attackers to bypass authentication and obtain access to backup files by leveraging a collision.