CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save &...
CVE-2007-2359 is a high vulnerability (CVSS 7.2) in Symantec Backupexec System Recovery, published April 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.41%EPSS, 35th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
CVE-2007-2359- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
CVE-2007-2359- Updated
- 2026-11-02
EUVDEUVD-2007-2354No score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
EUVD-2007-2354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vjc-rvgp-29xxNo score
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save &...
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.
- Record
GHSA-9vjc-rvgp-29xx- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1017971
vupen.com/english/advisories/2007/1552
exchange.xforce.ibmcloud.com/vulnerabilities/33931
labs.idefense.com/intelligence/vulnerabilities/display.php?id=519
symantec.com/avcenter/security/Content/2007.04.26.html
secunia.com/advisories/25013
nvd.nist.gov/vuln/detail/CVE-2007-2359
github.com/advisories/GHSA-9vjc-rvgp-29xx