CVE-2007-2361

Published: Apr 30, 2007Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.

Affected (16)

Products: Symantec: Backupexec System Recovery, Livestate Recovery, Norton Ghost, Norton Save And Recovery

Symantec

4 products

Backupexec System Recovery

Livestate Recovery

Norton Ghost

Norton Save And Recovery

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Symantec Backupexec System Recovery	Version 6.52
Symantec Backupexec System Recovery	Version 6.52a
Symantec Backupexec System Recovery	Version 6.53
Symantec Backupexec System Recovery	Version 6.5
Symantec Livestate Recovery	Version 6.01
Symantec Livestate Recovery	Version 6.02
Symantec Livestate Recovery	Version 6.0
Symantec Norton Ghost	Version 10.01
Symantec Norton Ghost	Version 10.0
Symantec Norton Ghost	Version 10.0
Symantec Norton Ghost	Version 10.0
Symantec Norton Save And Recovery	Version 1.01
Symantec Norton Save And Recovery	Version 1.01b
Symantec Norton Save And Recovery	Version 11.01
Symantec Norton Save And Recovery	Version 11.01b
Symantec Norton Save And Recovery	Version 11.0