CVE-2002-1769

Currently unrated

Key Information:

Vendor: Microsoft
Status: Site Server; Site Server Commerce
Vendor: CVE Published:; 31 December 2002

Summary

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

References

http://online.securityfocus.com/advisories/3843

x_refsource_MISC

http://www.securityfocus.com/bid/3998

vdb-entryx_refsource_BID

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us...

vendor-advisoryx_refsource_MSKB

EPSS Score

3% chance of being exploited in the next 30 days.

Timeline

Vulnerability Reserved
Jun 21, 2005
Vulnerability published
Dec 31, 2002

Collectors

NVD DatabaseMitre Database