NVD

Id
54527  
Name
CVE-2007-2360  
Description
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-30  
Modified Date
2011-03-07  
Seq
2007-2360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276541 54527 CVE-2007-2360 20070426 Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability  View
276542 54527 CVE-2007-2360 1017971  View
276543 54527 CVE-2007-2360 http://www.symantec.com/avcenter/security/Content/2007.04.26.html  View
276544 54527 CVE-2007-2360 ADV-2007-1552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56788 JVNDB-2007-005480 Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 Symantec Norton Ghost、Norton Save & Recovery、LiveState Recovery、および BackupExec System Recovery は、リストアポイントイメージのリモートバックアップが設定されている際、ユーザ名のハッシュで作られた鍵でネットワーク共有資格情報を暗号化するため、資格情報を取得される脆弱性が存在します。 CVE-2007-2360 25715 CVE-2007-2360 54527 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005480.html 2007-04-26 2012-12-20 View