CVE-2007-3022
First published: Tue Jun 05 2007(Updated: )
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Norton AntiVirus | =10.1 | |
| Symantec Norton AntiVirus | =10.1.400 | |
| Symantec Norton AntiVirus | =10.1.401 | |
| Symantec Client Security | =3.1.396 | |
| Symantec Norton AntiVirus | =10.1.396 | |
| Symantec Client Security | =3.1.401 | |
| Symantec Client Security | =3.1.400 | |
| Symantec Reporting Server | <=1.0.197.0 | |
| Symantec Client Security | =3.1 | |
| Symantec Client Security | =3.1.394 | |
| Symantec Norton AntiVirus | =10.0.2.2021 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.symantec.com/avcenter/security/Content/2007.06.05.html
- http://www.securityfocus.com/bid/24312
- http://www.securitytracker.com/id?1018196
- http://secunia.com/advisories/25543
- http://www.vupen.com/english/advisories/2007/2074
- http://osvdb.org/36108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34740
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec norton antivirus
- version/symantec norton antivirus/10.1
- version/symantec norton antivirus/10.1.400
- version/symantec norton antivirus/10.1.401
- canonical/symantec client security
- version/symantec client security/3.1.396
- version/symantec norton antivirus/10.1.396
- version/symantec client security/3.1.401
- version/symantec client security/3.1.400
- canonical/symantec reporting server
- version/symantec reporting server/1.0.197.0
- version/symantec client security/3.1
- version/symantec client security/3.1.394
- version/symantec norton antivirus/10.0.2.2021