CVE-2002-1117 Information

Description

Veritas Backup Exec 8.5 and earlier requires that the \RestrictAnonymous\ registry key for Microsoft Exchange 2000 must be set to 0 which enables anonymous listing of the SAM database and shares.

Reference

http://marc.info/?l=bugtraq&m=103134395124579&w=2 http://marc.info/?l=bugtraq&m=103134930629683&w=2 http://seer.support.veritas.com/docs/238618.htm http://www.osvdb.org/8230 https://exchange.xforce.ibmcloud.com/vulnerabilities/10093 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1036