Lucene search
HistoryApr 30, 2007 - 10:19 p.m.
CVE-2007-2360
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
9.5%
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.
Affected configurations
Node
symantecbackupexec_system_recoveryMatch6.5
ORsymantecbackupexec_system_recoveryMatch6.52
ORsymantecbackupexec_system_recoveryMatch6.52a
ORsymantecbackupexec_system_recoveryMatch6.53
ORsymanteclivestate_recoveryMatch6.0
ORsymanteclivestate_recoveryMatch6.01
ORsymanteclivestate_recoveryMatch6.02
ORsymantecnorton_ghostMatch10.0dell
ORsymantecnorton_ghostMatch10.0norton_system_works
ORsymantecnorton_ghostMatch10.01
ORsymantecnorton_save_and_recoveryMatch1.01sony_euro
ORsymantecnorton_save_and_recoveryMatch1.01bnorton_system_works_2007
ORsymantecnorton_save_and_recoveryMatch11.0
ORsymantecnorton_save_and_recoveryMatch11.01
ORsymantecnorton_save_and_recoveryMatch11.01b
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | backupexec_system_recovery | 6.5 | cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:* |
| symantec | backupexec_system_recovery | 6.52 | cpe:2.3:a:symantec:backupexec_system_recovery:6.52:*:*:*:*:*:*:* |
| symantec | backupexec_system_recovery | 6.52a | cpe:2.3:a:symantec:backupexec_system_recovery:6.52a:*:*:*:*:*:*:* |
| symantec | backupexec_system_recovery | 6.53 | cpe:2.3:a:symantec:backupexec_system_recovery:6.53:*:*:*:*:*:*:* |
| symantec | livestate_recovery | 6.0 | cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:* |
| symantec | livestate_recovery | 6.01 | cpe:2.3:a:symantec:livestate_recovery:6.01:*:*:*:*:*:*:* |
| symantec | livestate_recovery | 6.02 | cpe:2.3:a:symantec:livestate_recovery:6.02:*:*:*:*:*:*:* |
| symantec | norton_ghost | 10.0 | cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:* |
| symantec | norton_ghost | 10.0 | cpe:2.3:a:symantec:norton_ghost:10.0:*:norton_system_works:*:*:*:*:* |
| symantec | norton_ghost | 10.01 | cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2007-04-30 22:19:00
cve
cve
CVE-2007-2360
2007-04-30 22:19:00
cvelist
cvelist
CVE-2007-2360
2007-04-30 22:00:00
securityvulns
securityvulns
Symantec Norton Ghost multiple security vulnerabilities
2007-04-28 00:00:00
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2007-2360