CVE-2007-4346: symantec backupexec_system_recovery Resource Management Errors

EPSS trend

Probability

2.58%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

secunia.com/advisories/26975Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
securityresponse.symantec.com/avcenter/security/Content/2007.11.27.htmlX Refsource CONFIRMPatch
www.securityfocus.com/archive/1/484318/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/38676VDB EntryX Refsource XF
secunia.com/secunia_research/2007-74/advisory/X Refsource MISCPatchVendor Advisory
securitytracker.com/id?1019001VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/26028VDB EntryX Refsource BID
www.securityfocus.com/archive/1/484333/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2007/4019VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2007-2359symantecbackupexec_system_recovery+30.41%19y ago30-04-2007 22:00Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows local users to gain privileges via a long string.CVE-2007-2360symantecbackupexec_system_recovery+30.34%19y ago30-04-2007 22:00Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the credentials by calculating the key.CVE-2007-2361symantecbackupexec_system_recovery+30.34%19y ago30-04-2007 22:00Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions (world readable) for a configuration file with network share credentials, which allows local users to obtain the credentials by reading the file.CVE-2007-4347symantecbackupexec_system_recovery2.93%18y ago29-11-2007 23:00Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.CVE-2008-2512symantecbackupexec_system_recovery2.79%18y ago02-06-2008 14:00Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.CVE-2008-0457symantecbackupexec_system_recovery11.86%18y ago07-02-2008 20:00Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

All vulnerabilities inbackupexec_system_recovery

CVE-2007-4346: symantec backupexec_system_recovery Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References