Korean
<< Back
VID 27042
Severity 40
Port 135
Protocol TCP
Class WMI
Detailed Description Remote Registry Service service is running on the remote system. Windows all initialization and configuration information is stored in the registry. Remote Access from Registry Editor to change the key, very dangerous so network access is set to block. Remote access to the registry, administrator privileges in order to access to or remote from the special account is needed. Due to this service any registry can be modified.
- If not use, Remote Registry Service service should be disabled.

* Platforms Affected:
Microsoft Windows Any version
Recommendation Remote Registry Service service should be disabled.

1. Run> SERVICES.MSC> Remote Registry Service> Properties
2. Startup type -> Disabled, Service status -> Stop Set
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)