Unscored severity · published Jun 5, 2007
CVE-2007-3022
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Symantec
3.1; 3.1.394; 3.1.396; 3.1.400; 3.1.401 · source: NVD
NA
Norton Antivirus · Symantec
10.0.2.2021; 10.1; 10.1.396; 10.1.400; 10.1.401 · source: NVD
RS
Reporting Server · Symantec
through 1.0.197.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3022
osvdb.org
http://osvdb.org/36108
secunia.com
http://secunia.com/advisories/25543
www.securityfocus.com
http://www.securityfocus.com/bid/24312
www.securitytracker.com
http://www.securitytracker.com/id?1018196
Patch
http://www.symantec.com/avcenter/security/Content/2007.06.05.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/2074
More from Client Security
–
CVE-2010-0107
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and…
–
CVE-2010-0108
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and…
–
CVE-2010-0106
The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled,…
–
CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…
–
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…