Unscored severity · published Jun 25, 2002
CVE-2002-0345
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges
–
CVSS
1.6%
EPSS
No
On KEV
Description
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NG
Norton Ghost · Symantec
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0345
marc.info
http://marc.info/?l=bugtraq&m=101529792821615&w=2
Exploit
http://online.securityfocus.com/archive/1/258293
Vendor Advisory
http://www.iss.net/security_center/static/8305.php
Exploit
http://www.securityfocus.com/bid/4181
More from Norton Ghost
5.5
CVE-2011-3477
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton…
–
CVE-2009-1517
Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow…
–
CVE-2007-3666
Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function
–
CVE-2007-3665
Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the…
–
CVE-2007-3132
Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service…