CVE-2007-2359: Symantec Backupexec System Recovery

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.

Affected products

• Symantec Backupexec System Recovery: version 6.5 only; version 6.52 only; version 6.52a only; version 6.53 only
• Symantec Livestate Recovery: version 6.0 only; version 6.01 only; version 6.02 only
• Symantec Norton Ghost: version 10.0 only; version 10.01 only
• Symantec Norton Save And Recovery: version 1.01 only; version 1.01b only; version 11.0 only; version 11.01 only; version 11.01b only

Published 2007-04-30. Last modified 2026-06-16.