CVE-2007-2361: Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20...

Security readout for executives and security teams

This issue could expose network share credentials used by older Symantec backup and recovery products. The risk exists when remote backups of restore point images are configured and a local user can read a weakly protected configuration file. The business impact is potential access to backup storage or related network shares, not remote takeover by itself. Exposure is most likely on legacy systems still running the named Symantec backup products before 20070426 with remote backup restore point images configured. Systems without local untrusted users or without remote backup configuration appear less exposed based on the provided description. Treat this as a legacy credential exposure risk. Prioritize systems that still protect business-critical backups or store credentials for shared backup locations. The urgency is higher where many local users can access the backup host. Mitigation focus: Apply Symantec vendor guidance or updates for the 2007-04-26 advisory.; Identify and retire unsupported affected Symantec backup products where possible.; Rotate network share credentials used by affected backup configurations..

Prepared

Jun 29, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.