CVE-2002-0049

Description

Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.

Affected Platforms

Weakness Type

CWE-269

References

• http://www.osvdb.org/2042
• http://www.securityfocus.com/bid/4053
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-00…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8092
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3…
• http://www.osvdb.org/2042