PT-2007-3693 · Symantec · Symantec Norton Ghost+3

Published 2007-04-30 · Updated 2011-03-08 · CVE-2007-2360

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Norton Ghost versions prior to 20070426 Symantec Norton Save & Recovery versions prior to 20070426 Symantec LiveState Recovery versions prior to 20070426 Symantec BackupExec System Recovery versions prior to 20070426

Description The issue allows local users to obtain network share credentials by calculating a key formed by a hash of the username. This is possible when remote backups of restore point images are configured.

Recommendations For Symantec Norton Ghost versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec Norton Save & Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec LiveState Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue. For Symantec BackupExec System Recovery versions prior to 20070426, update to a version released after 20070426 to resolve the issue.

Fix

Related Identifiers

CVE-2007-2360

Affected Products

Symantec Backup Exec System Recovery

Symantec Livestate Recovery

Symantec Norton Ghost

Symantec Norton Save & Recovery

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-2360 · Security Note
• http://symantec.com/avcenter/security/Content/2007.04.26.html · Note
• http://secunia.com/advisories/25013 · Note
• http://securitytracker.com/id?1017971 · Note
• http://vupen.com/english/advisories/2007/1552 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520 · Note