CVE-2007-2360: Symantec Backupexec System Recovery

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.

Affected products

• Symantec Backupexec System Recovery: version 6.5 only; version 6.52 only; version 6.52a only; version 6.53 only
• Symantec Livestate Recovery: version 6.0 only; version 6.01 only; version 6.02 only
• Symantec Norton Ghost: version 10.0 only; version 10.01 only
• Symantec Norton Save And Recovery: version 1.01 only; version 1.01b only; version 11.0 only; version 11.01 only; version 11.01b only

Published 2007-04-30. Last modified 2026-06-16.