CVE-2002-1117: Medium severity Symantec Veritas Backup Exec vulnerability
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set the RestrictAnonymous registry key to 0 for Veritas Backup Exec 8.5 and earlier.
Microsoft Exchange 2000 RestrictAnonymous = 0
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1117?
The severity of CVE-2002-1117 is considered high due to its potential to expose sensitive information.
How do I fix CVE-2002-1117?
To fix CVE-2002-1117, change the 'RestrictAnonymous' registry key for Microsoft Exchange 2000 to 1.
Which versions of Veritas Backup Exec are affected by CVE-2002-1117?
CVE-2002-1117 affects all versions of Veritas Backup Exec up to and including 8.5.
What risks are associated with CVE-2002-1117?
The risks associated with CVE-2002-1117 include unauthorized access to the SAM database and shared resources.
Is there a patch available for CVE-2002-1117?
There is no specific patch for CVE-2002-1117, but configuration changes can mitigate the vulnerability.