CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save &...
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
CVE-2007-2359- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
CVE-2007-2359- Updated
- 2026-11-02
EUVDEUVD-2007-2354 No score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
EUVD-2007-2354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vjc-rvgp-29xx No score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save &...
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
GHSA-9vjc-rvgp-29xx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2359 is a high vulnerability (CVSS 7.2) in Symantec Backupexec System Recovery, published April 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
References
securitytracker.com/id?1017971
vupen.com/english/advisories/2007/1552
exchange.xforce.ibmcloud.com/vulnerabilities/33931
labs.idefense.com/intelligence/vulnerabilities/display.php?id=519
symantec.com/avcenter/security/Content/2007.04.26.html
secunia.com/advisories/25013
nvd.nist.gov/vuln/detail/CVE-2007-2359
github.com/advisories/GHSA-9vjc-rvgp-29xx