CVE-2007-2361

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.

Score
CVSS 2.0 4.9 Medium
Status
Modified - cve@mitre.org
Published
2007-04-30
Last modified
2024-08-07

Affected products

References

 
 
© AVABIS GmbH privacypolicy about