CVE-2002-1769

Currently unrated

Key Information:

Vendor
Microsoft
Status
Site Server
Site Server Commerce
Vendor
CVE Published:
31 December 2002

Summary

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

References

http://online.securityfocus.com/advisories/3843
x_refsource_MISC
http://www.securityfocus.com/bid/3998
vdb-entryx_refsource_BID
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us...
vendor-advisoryx_refsource_MSKB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.