CVE Vulnerabilities

CVE-2007-2360

Published: Apr 30, 2007 | Modified: Mar 08, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:L/AC:L/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.

Affected Software

Name Vendor Start Version End Version
Backupexec_system_recovery Symantec 6.5 (including) 6.5 (including)
Backupexec_system_recovery Symantec 6.52 (including) 6.52 (including)
Backupexec_system_recovery Symantec 6.52a (including) 6.52a (including)
Backupexec_system_recovery Symantec 6.53 (including) 6.53 (including)
Livestate_recovery Symantec 6.0 (including) 6.0 (including)
Livestate_recovery Symantec 6.01 (including) 6.01 (including)
Livestate_recovery Symantec 6.02 (including) 6.02 (including)
Norton_ghost Symantec 10.0 (including) 10.0 (including)
Norton_ghost Symantec 10.01 (including) 10.01 (including)
Norton_save_and_recovery Symantec 1.01 (including) 1.01 (including)
Norton_save_and_recovery Symantec 1.01b (including) 1.01b (including)
Norton_save_and_recovery Symantec 11.0 (including) 11.0 (including)
Norton_save_and_recovery Symantec 11.01 (including) 11.01 (including)
Norton_save_and_recovery Symantec 11.01b (including) 11.01b (including)

References