CVE-2002-0345: High severity symantec norton ghost vulnerability
Published May 3, 2002
·Updated
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
Affected Software
1 affected component
Symantec Norton Ghost=7.0
Remediation
Patch Available
Event History
May 3, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0345?
CVE-2002-0345 is considered a medium severity vulnerability due to the risk of unauthorized access through plaintext credentials.
2
How do I fix CVE-2002-0345?
To fix CVE-2002-0345, upgrade to a newer version of Symantec Ghost that does not store credentials in plaintext.
3
What are the consequences of exploiting CVE-2002-0345?
Exploiting CVE-2002-0345 could allow an attacker to gain unauthorized access and potentially escalate privileges on the affected system.
4
Is CVE-2002-0345 still a risk for modern systems?
CVE-2002-0345 may pose a risk for systems still running the affected version of Symantec Ghost, but it is less relevant for current systems.
5
What versions of software are affected by CVE-2002-0345?
CVE-2002-0345 specifically affects Symantec Ghost version 7.0.