CVE-2002-0049: Medium severity Microsoft Exchange Server vulnerability
Published Mar 8, 2002
·Updated
Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
Affected Software
1 affected component
Microsoft Exchange Server=2000
Remediation
Patch Available
Event History
Mar 8, 2002
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0049?
CVE-2002-0049 is considered a medium severity vulnerability due to its potential for unauthorized access to the system registry.
2
How do I fix CVE-2002-0049?
To fix CVE-2002-0049, restrict the permissions on the WinReg key to prevent the "Everyone" group from having read or modify access.
3
Which versions of Microsoft Exchange Server are affected by CVE-2002-0049?
CVE-2002-0049 affects Microsoft Exchange Server 2000.
4
What are the potential risks of CVE-2002-0049?
CVE-2002-0049 allows remote attackers to read or modify critical registry keys, which could lead to further exploitation of the system.
5
Is there a patch available for CVE-2002-0049?
There is no specific patch for CVE-2002-0049, but securing the registry permissions is recommended as a mitigation strategy.