← Vulnerability feed

Vulnerability record · CVE-2008-2512 · published 2 June 2008

CVE-2008-2512: Symantec backupexec system recovery path traversal vulnerability

Symantec · Backupexec System Recovery

Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.

5.0 CVSS 2.0 Medium EPSS 2.8% · top 14.1% CWE-22 · Path traversal
5.0CVSS 2.0 base score
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/30432 PatchVendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html Patch
http://www.securityfocus.com/bid/29350
http://www.securitytracker.com/id?1020128
http://www.vupen.com/english/advisories/2008/1686/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42714
http://secunia.com/advisories/30432 PatchVendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html Patch
http://www.securityfocus.com/bid/29350
http://www.securitytracker.com/id?1020128
http://www.vupen.com/english/advisories/2008/1686/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42714

Track CVE-2008-2512 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-0457Symantec backupexec system recovery improper input validation vulnerabilityUnrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exe…EPSS 12%7.8CVE-2007-4347Symantec backupexec system recovery vulnerabilityMultiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.…EPSS 2.9%7.2CVE-2007-2359Symantec backupexec system recovery vulnerabilityBuffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recover…EPSS 0.41%6.8CVE-2007-2360Symantec backupexec system recovery vulnerabilitySymantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore poi…EPSS 0.34%5.0CVE-2007-4346Symantec backupexec system recovery vulnerabilityThe Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers t…EPSS 2.6%4.9CVE-2007-2361Symantec backupexec system recovery vulnerabilitySymantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore poi…EPSS 0.34%4.4CVE-2012-0305Symantec backupexec system recovery vulnerabilityUntrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to…EPSS 0.43%9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%

Source: NIST National Vulnerability Database (record CVE-2008-2512), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.