VulnerabilityModified
CVE-2002-1117
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
MEDIUM 5.0EPSS 1.75%
Does this matter?
Lower severity and a low EPSS score (1.75%). Track it; it rarely justifies an emergency change on its own.
Description
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.75% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- symantec veritas/backup exec
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=103134395124579&w=2
- http://marc.info/?l=bugtraq&m=103134930629683&w=2
- http://seer.support.veritas.com/docs/238618.htm
- http://www.osvdb.org/8230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10093
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036
- http://marc.info/?l=bugtraq&m=103134395124579&w=2
- http://marc.info/?l=bugtraq&m=103134930629683&w=2
- http://seer.support.veritas.com/docs/238618.htm
- http://www.osvdb.org/8230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10093
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.