CVE-2007-2360
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/04/2007
Last modified:
08/03/2011
Description
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.
Impact
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:symantec:backupexec_system_recovery:6.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:backupexec_system_recovery:6.52:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:backupexec_system_recovery:6.52a:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:backupexec_system_recovery:6.53:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:livestate_recovery:6.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:livestate_recovery:6.01:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:livestate_recovery:6.02:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_ghost:10.0:*:dell:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_ghost:10.0:*:norton_system_works:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_ghost:10.01:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_save_and_recovery:1.01:*:sony_euro:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_save_and_recovery:1.01b:*:norton_system_works_2007:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_save_and_recovery:11.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_save_and_recovery:11.01:*:*:*:*:*:*:* | ||
| cpe:2.3:a:symantec:norton_save_and_recovery:11.01b:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page