Unrated severityNVD Advisory· Published Apr 30, 2007· Updated Jun 16, 2026
CVE-2007-2361
CVE-2007-2361
Description
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.
Affected products
19cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:backupexec_system_recovery:6.52:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:backupexec_system_recovery:6.52a:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:backupexec_system_recovery:6.53:*:*:*:*:*:*:*
- (no CPE)range: <20070426
cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:livestate_recovery:6.01:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:livestate_recovery:6.02:*:*:*:*:*:*:*
cpe:2.3:a:symantec:norton_ghost:10.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:symantec:norton_ghost:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:*
- cpe:2.3:a:symantec:norton_ghost:10.0:*:norton_system_works:*:*:*:*:*
- (no CPE)range: <20070426
cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:*+ 5 more
- cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:*
- cpe:2.3:a:symantec:norton_save_and_recovery:1.01:*:sony_euro:*:*:*:*:*
- cpe:2.3:a:symantec:norton_save_and_recovery:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_save_and_recovery:11.01:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_save_and_recovery:11.01b:*:*:*:*:*:*:*
- (no CPE)range: <20070426
Patches
Vulnerability mechanics
References
6- www.symantec.com/avcenter/security/Content/2007.04.26.htmlnvdPatchVendor Advisory
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdVendor Advisory
- secunia.com/advisories/25013nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/1552nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/33929nvd
News mentions
0No linked articles in our index yet.