CVE-2002-1769

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Affected (13)

Products: Microsoft: Site Server, Site Server Commerce

Microsoft

2 products

Site Server

Site Server Commerce

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Site Server	Version 3.0
Microsoft Site Server	Version 3.0 apha
Microsoft Site Server	Version 3.0 sp1
Microsoft Site Server	Version 3.0 sp1_alpha
Microsoft Site Server	Version 3.0 sp2
Microsoft Site Server	Version 3.0 sp2_alpha
Microsoft Site Server	Version 3.0 sp3
Microsoft Site Server	Version 3.0 sp3_alpha
Microsoft Site Server Commerce	Version 3.0
Microsoft Site Server Commerce	Version 3.0 alpha
Microsoft Site Server Commerce	Version 3.0 sp1_alpha
Microsoft Site Server Commerce	Version 3.0 sp2_alpha
Microsoft Site Server Commerce	Version 3.0 sp3_alpha