PT-2002-1141 · Microsoft · Exchange 2000 Server

Published 2002-03-08 · Updated 2020-04-02 · CVE-2002-0049

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2000

Description The issue concerns a privilege escalation where the "Everyone" group is given privileges to the WinReg key. This could allow remote attackers to read or modify registry keys.

Recommendations For Microsoft Exchange Server 2000, consider restricting access to the WinReg key to prevent unauthorized modifications until a fix is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2002-0049

Affected Products

Exchange 2000 Server

References · 7

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0049 · Security Note
• http://securityfocus.com/bid/4053 · Patch
• http://osvdb.org/2042 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8092 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0049 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022 · Note