CVE:CVE-2007-2360
CNNVD:CNNVD-200704-616
当恢复点的图像的远程备份被配置时，Symantec Norton Ghost，Norton Save & Recovery，LiveState Recovery和BackupExec System Recovery会使用一个由用户名信息形成的key加密网络共享证书，存在敏感信息泄露漏洞。这使得本地用户可以通过计算该key来获得证书。
solution:Upgrade symantec backupexec_system_recovery to a higher version than 6.5,6.52,6.52a,6.53,and avoid the version 6.5,6.52,6.52a,6.53; Upgrade symantec livestate_recovery to a higher version than 6.0,6.01,6.02,and avoid the version 6.0,6.01,6.02; Upgrade symantec norton_ghost to a higher version than 10.0,10.01,and avoid the version 10.0,10.01; Upgrade symantec norton_save_and_recovery to a higher version than 1.01,1.01b,11.0,11.01,11.01b,and avoid the version 1.01,1.01b,11.0,11.01,11.01b