| Package | Affected versions | Patched versions |
|---|---|---|
| backupexec system recovery | = 6.5= 6.52= 6.52a= 6.53 | |
| livestate recovery | = 6.0= 6.01= 6.02 | |
| norton ghost | = 10.0= 10.01 | |
| norton save and recovery | = 1.01= 1.01b= 11.0= 11.01= 11.01b |
Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free