CVE-2007-2361: Symantec Backupexec System Recovery

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.

Affected products

• Symantec Backupexec System Recovery: version 6.5 only; version 6.52 only; version 6.52a only; version 6.53 only
• Symantec Livestate Recovery: version 6.0 only; version 6.01 only; version 6.02 only
• Symantec Norton Ghost: version 10.0 only; version 10.01 only
• Symantec Norton Save And Recovery: version 1.01 only; version 1.01b only; version 11.0 only; version 11.01 only; version 11.01b only

Published 2007-04-30. Last modified 2026-06-16.