Microsoft Exchange 2000 system attendant sets incorrect remote registry permissions

Overview The Microsoft Exchange System Attendant sets the permissions on a registry key incorrectly, allowing remote intruders access to the registry. Description The Microsoft Exchange System Attendant changes the permissions of the...

CVE-2002-0049

The CVE-2002-0049 issue is validated by connected sources describing a misconfigured WinReg permissions in Microsoft Exchange 2000 System Attendant. The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg becomes world-writeable, enabling non-admins (via remote registry ac...

Security Bulletin MS02-003

---------------------------------------------------------------------- Title: Exchange 2000 System Attendant Incorrectly Sets Remote Registry Permissions Date: February 07, 2002 Software: Exchange Server 2000 Impact: Less Secure Default Settings Max Risk: Low Bulletin: MS02-003 Microsoft...