Unscored severity · published Apr 30, 2007
CVE-2007-2361
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured,…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Backupexec System Recovery · Symantec
6.5; 6.52; 6.52a; 6.53 · source: NVD
LR
Livestate Recovery · Symantec
6.0; 6.01; 6.02 · source: NVD
NG
Norton Ghost · Symantec
10.0; 10.0; 10.0; 10.01 · source: NVD
NS
Norton Save And Recovery · Symantec
1.01; 1.01b; 11.0; 11.01; 11.01b · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2361
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2361
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520
secunia.com
http://secunia.com/advisories/25013
www.securitytracker.com
http://www.securitytracker.com/id?1017971
Patch
http://www.symantec.com/avcenter/security/Content/2007.04.26.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/1552
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33929
More from Backupexec System Recovery
–
CVE-2012-0305
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan…
–
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via…
–
CVE-2008-0457
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0…
–
CVE-2007-4347
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to…
–
CVE-2007-4346
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service…