VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 30, 2007· Updated Apr 23, 2026

CVE-2007-2360

CVE-2007-2360

Description

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.

Affected products

15
  • Symantec/Backupexec System Recovery4 versions
    cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.52:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.52a:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:backupexec_system_recovery:6.53:*:*:*:*:*:*:*
  • Symantec/Livestate Recovery3 versions
    cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:livestate_recovery:6.01:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:livestate_recovery:6.02:*:*:*:*:*:*:*
  • Symantec/Norton Ghost3 versions
    cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:*+ 2 more
    • cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_ghost:10.0:*:norton_system_works:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:*
  • Symantec/Norton Save And Recovery5 versions
    cpe:2.3:a:symantec:norton_save_and_recovery:1.01:*:sony_euro:*:*:*:*:*+ 4 more
    • cpe:2.3:a:symantec:norton_save_and_recovery:1.01:*:sony_euro:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.01:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:norton_save_and_recovery:11.01b:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.