CVE-2007-2361: Medium severity Symantec BackupExec System Recovery vulnerability
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2361?
CVE-2007-2361 is rated as a medium severity vulnerability due to its potential for local exploitation leading to unauthorized access.
How do I fix CVE-2007-2361?
To fix CVE-2007-2361, change the permissions of the configuration file to restrict access from unauthorized users.
What products are affected by CVE-2007-2361?
CVE-2007-2361 affects various versions of Symantec products like Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery.
Can CVE-2007-2361 be exploited remotely?
CVE-2007-2361 primarily allows local users to exploit the vulnerability, not through remote access.
What are the implications of CVE-2007-2361 for data security?
The implications of CVE-2007-2361 include the risk of exposing sensitive network share credentials to unauthorized local users.