Symantec Norton Ghost vulnerabilities

13 CVEs affecting Symantec Norton Ghost, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-3477, published 2018-02-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1517, published 2009-05-04. Medium severity, CVSS 4.3. EPSS: 6.6% chance of exploitation in the next 30 days. Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to…
CVE-2007-3666, published 2007-07-10. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function.
CVE-2007-3132, published 2007-06-08. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service (client or server…
CVE-2001-0598, published 2001-08-02. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error…
CVE-2002-0345, published 2002-06-25. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
CVE-2007-3665, published 2007-07-10. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other…
CVE-2011-3477, published 2018-02-19. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local…
CVE-2007-2359, published 2007-04-30. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain…
CVE-2006-1286, published 2006-03-19. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain…
CVE-2006-1284, published 2006-03-19. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local…

Latest

CVE-2007-2361, published 2007-04-30. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions…
CVE-2007-2360, published 2007-04-30. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share…
CVE-2006-1285, published 2006-03-19. Low severity, CVSS 3.2. EPSS: 0.3% chance of exploitation in the next 30 days. SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local…