Microsoft Exchange Server 2000 System Attendant gives Everyone group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | 2000 (including) | 2000 (including) |