VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 30, 2007· Updated Jun 16, 2026

CVE-2007-2360

CVE-2007-2360

Description

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.

Affected products

18
  • Symantec/Backupexec System Recovery5 versions
    cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.52:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.52a:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.53:*:*:*:*:*:*:*
    • (no CPE)range: < 20070426
  • Symantec/Livestate Recovery3 versions
    cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:livestate_recovery:6.01:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:livestate_recovery:6.02:*:*:*:*:*:*:*
  • Symantec/Norton Ghost4 versions
    cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_ghost:10.0:*:norton_system_works:*:*:*:*:*
    • (no CPE)range: < 20070426
  • Symantec/Norton Save And Recovery6 versions
    cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:*+ 5 more
    • cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:1.01:*:sony_euro:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.01:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.01b:*:*:*:*:*:*:*
    • (no CPE)range: < 20070426

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.