CVE-2009-1517

CVE-2009-1517 affects Symantec Norton Ghost 14.0, via the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll version 14.0.4.30167. The vulnerability arises from unvalidated input to six methods (GetBackupLocationPath, CallUninstall, SetupDeleteVolume, CanUseEasySetup, CallAddInitialProtecti...

CVE-2007-2360

CVE-2007-2360 affects Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery prior to 20070426. When remote backups of restore point images are configured, network share credentials are encrypted with a key formed by a hash of the username, allowing loca...

CVE-2006-1284

The CVE-2006-1284 entry concerns a default administrator login/password left during installation of SQLAnywhere in Symantec Ghost 8.0/8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0. This local-privilege issue could let a local user gain privileges or modify tasks. Technical context fro...

CVE-2006-1286

The CVE covers a local buffer overflow in the login dialog (dbisqlc.exe) of SQL Anywhere used with Symantec Ghost 8.0/8.2 (SGSS 1.0). Root cause: improper handling in the login dialog could allow a local user to read sensitive data from the database. Impact per sources: potential unauthorized inf...

CVE-2006-1285

The CVE-2006-1285 issue affects Symantec Ghost 8.0/8.2 (as used in Symantec Ghost Solutions Suite 1.0). The root cause is a memory-mapping permission problem in the database shared memory, causing read/write access for all users and enabling potential local access to data. Affected component: SQL...

CVE-2007-2359

CVE-2007-2359 concerns a buffer overflow in Ghost Service Manager used by Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery and BackupExec System Recovery prior to 20070426. The vulnerability arises from handling of a long string, enabling local users to gain privileges (local pri...

CVE-2007-3132

CVE-2007-3132 describes multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier (including Ghost 8.0.992 and possibly other versions) that can cause a denial of service. The DoS is triggered by malformed requests sent to the daemon port over UDP: 1346/UDP or 1347/UDP. The prov...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, enabling privilege escalation if an attacker accesses the registry. The CVE-2002-0345 entry documents this plaintext credential storage as the underlying issue with a base impact of partial confide...

CVE-2007-3666

CVE-2007-3666 refers to a buffer overflow in RemoteCommand.DLL of Symantec Norton Ghost 12.0. The vulnerability is triggered via the Connect function, allowing remote code execution. The available connected documents confirm the affected component and the root cause (buffer overflow) but do not p...

CVE-2007-2361

CVE-2007-2361 affects Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery and BackupExec System Recovery prior to 20070426. When remote backups of restore points are configured, a configuration file containing network share credentials is world-readable, allowing local users to read...

CVE-2011-3477

CVE-2011-3477 concerns the GEAR Software CD/DVD Filter driver (GEARAspiWDM.sys) as used in several Symantec products (Backup Exec System Recovery 8.5 and BESR 2010, System Recovery 2011, Norton 360, Norton Ghost). According to the linked records, the vulnerability enables a local attacker to caus...

CVE-2007-3665

Technical details for CVE-2007-3665 are not publicly provided in the supplied documents; no affected products, versions, or remediation details are specified. Monitor for updates.

CVE-2001-0598

CVE-2001-0598 affects Symantec Ghost 6.5 and earlier. A remote attacker can cause a denial of service by sending large (>45 KB) data to the Ghost Configuration Server on port 1347, triggering an unhandled error. Public details confirm the vulnerable component is the Ghost Configuration Server,...