CVE-2007-2360
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, y BackupExec System Recovery anterior a 20070426, cuando están los backups remotos de las imágenes del punto de restauración configurados, cifra las credenciales de la parte de la red con una llave formada por un hash del username, que permite que los usuarios locales obtengan las credenciales calculando la llave.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-04-30 CVE Reserved
- 2007-04-30 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=520 | Third Party Advisory | |
| http://secunia.com/advisories/25013 | Third Party Advisory | |
| http://www.securitytracker.com/id?1017971 | Vdb Entry | |
| http://www.symantec.com/avcenter/security/Content/2007.04.26.html | X_refsource_confirm | |
| http://www.vupen.com/english/advisories/2007/1552 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 6.5 Search vendor "Symantec" for product "Backupexec System Recovery" and version "6.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 6.52 Search vendor "Symantec" for product "Backupexec System Recovery" and version "6.52" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 6.52a Search vendor "Symantec" for product "Backupexec System Recovery" and version "6.52a" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 6.53 Search vendor "Symantec" for product "Backupexec System Recovery" and version "6.53" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Livestate Recovery Search vendor "Symantec" for product "Livestate Recovery" | 6.0 Search vendor "Symantec" for product "Livestate Recovery" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Livestate Recovery Search vendor "Symantec" for product "Livestate Recovery" | 6.01 Search vendor "Symantec" for product "Livestate Recovery" and version "6.01" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Livestate Recovery Search vendor "Symantec" for product "Livestate Recovery" | 6.02 Search vendor "Symantec" for product "Livestate Recovery" and version "6.02" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Ghost Search vendor "Symantec" for product "Norton Ghost" | 10.0 Search vendor "Symantec" for product "Norton Ghost" and version "10.0" | dell |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Ghost Search vendor "Symantec" for product "Norton Ghost" | 10.0 Search vendor "Symantec" for product "Norton Ghost" and version "10.0" | norton_system_works |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Ghost Search vendor "Symantec" for product "Norton Ghost" | 10.01 Search vendor "Symantec" for product "Norton Ghost" and version "10.01" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Save And Recovery Search vendor "Symantec" for product "Norton Save And Recovery" | 1.01 Search vendor "Symantec" for product "Norton Save And Recovery" and version "1.01" | sony_euro |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Save And Recovery Search vendor "Symantec" for product "Norton Save And Recovery" | 1.01b Search vendor "Symantec" for product "Norton Save And Recovery" and version "1.01b" | norton_system_works_2007 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Save And Recovery Search vendor "Symantec" for product "Norton Save And Recovery" | 11.0 Search vendor "Symantec" for product "Norton Save And Recovery" and version "11.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Save And Recovery Search vendor "Symantec" for product "Norton Save And Recovery" | 11.01 Search vendor "Symantec" for product "Norton Save And Recovery" and version "11.01" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Save And Recovery Search vendor "Symantec" for product "Norton Save And Recovery" | 11.01b Search vendor "Symantec" for product "Norton Save And Recovery" and version "11.01b" | - |
Affected
| ||||||