CVE-2002-1117

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-04 · updated 2026-10-09

Description

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.

Affected products

Symantec Veritas Backup Exec: through 8.5

References

http://marc.info/?l=bugtraq&m=103134395124579&w=2
http://marc.info/?l=bugtraq&m=103134930629683&w=2
http://seer.support.veritas.com/docs/238618.htm
http://www.osvdb.org/8230
https://exchange.xforce.ibmcloud.com/vulnerabilities/10093
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036
http://marc.info/?l=bugtraq&m=103134395124579&w=2
http://marc.info/?l=bugtraq&m=103134930629683&w=2
http://seer.support.veritas.com/docs/238618.htm
http://www.osvdb.org/8230
https://exchange.xforce.ibmcloud.com/vulnerabilities/10093
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036

Get alerted when CVE-2002-1117 or the next vulnerability affects your stack