PT-2007-3693 · Symantec · Symantec Norton Ghost+3

Publicado 2007-04-30 · Atualizado 2011-03-08 · CVE-2007-2360

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Norton Ghost versions prior to 20070426 Symantec Norton Save & Recovery versions prior to 20070426 Symantec LiveState Recovery versions prior to 20070426 Symantec BackupExec System Recovery versions prior to 20070426

Description The issue allows local users to obtain network share credentials by calculating a key formed by a hash of the username. This is possible when remote backups of restore point images are configured.

Recommendations For Symantec Norton Ghost versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec Norton Save & Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec LiveState Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec BackupExec System Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2360

Produtos afetados

Symantec Backup Exec System Recovery

Symantec Livestate Recovery

Symantec Norton Ghost

Symantec Norton Save & Recovery

Referências · 6

• http://symantec.com/avcenter/security/Content/2007.04.26.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2360 · Nota de Segurança
• http://secunia.com/advisories/25013 · Nota
• http://securitytracker.com/id?1017971 · Nota
• http://vupen.com/english/advisories/2007/1552 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520 · Nota