CVE-2002-1769 Hardcoded credentials in n/a
Remote attackers can use default LDAP credentials to gain local logon privileges on Microsoft Site Server installations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-1769?
CVE-2002-1769 is a high-severity vulnerability in n/a, published on 21 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.
Which versions are affected by CVE-2002-1769?
It affects 2 products.
Products include Microsoft Site Server, Microsoft Site Server Commerce.
How do I fix CVE-2002-1769?
No fix has been published for CVE-2002-1769 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-1769 being exploited?
There is no known exploitation of CVE-2002-1769 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-1999-1246 Information disclosure in n/a
- CVE-2000-0161 SQL injection in n/a
- CVE-1999-0360 MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
- CVE-2002-2081 Denial of service in n/a
- CVE-1999-1520 Information disclosure in n/a
Sources
Also known as GHSA-c3pr-rr9m-p77p.