Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Exchange Inappropriate Registry Permissions Vulnerability

A flaw has been reported in the Microsoft Exchange System Attendant, which could allow unprivileged users access to the WinReg key.

The WinReg key controls users and groups ability to connect remotely to the registry.

The System Attendant must ensure the that the Microsoft Exchange System Manager can remotely connect, in doing so, the System Attendant adds the 'Everyone' group to the WinReg key.







 

Privacy Statement
Copyright 2009, SecurityFocus