PT-2002-2120 · Microsoft+1 · Exchange 2000+1

Published 2002-10-04 · Updated 2017-10-10 · CVE-2002-1117

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Veritas Backup Exec versions 8.5 and earlier

Description: The issue concerns a configuration requirement in Veritas Backup Exec for Microsoft Exchange 2000, where the RestrictAnonymous registry key must be set to 0. This setting enables anonymous listing of the SAM database and shares.

Recommendations: For Veritas Backup Exec versions 8.5 and earlier, consider updating the RestrictAnonymous registry key setting to restrict anonymous access, as setting it to 0 enables potentially risky anonymous listing of the SAM database and shares.

Fix

Related Identifiers

CVE-2002-1117

Affected Products

Exchange 2000

Veritas Backup Exec

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-1117 · Security Note
• http://marc.info/?l=bugtraq&m=103134930629683&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036 · Note
• http://marc.info/?l=bugtraq&m=103134395124579&w=2 · Note
• http://seer.support.veritas.com/docs/238618.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10093 · Note
• http://osvdb.org/8230 · Note