PT-2002-1141 · Microsoft · Exchange 2000 Server

Publicado 2002-03-08 · Atualizado 2020-04-02 · CVE-2002-0049

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2000

Description The issue concerns a privilege escalation where the "Everyone" group is given privileges to the WinReg key. This could allow remote attackers to read or modify registry keys.

Recommendations For Microsoft Exchange Server 2000, consider restricting access to the WinReg key to prevent unauthorized modifications until a fix is available.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2002-0049

Produtos afetados

Exchange 2000 Server

Referências · 7

• http://osvdb.org/2042 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0049 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8092 · Nota
• http://securityfocus.com/bid/4053 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0049 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022 · Nota