Unscored CVE-2002-1769 EUVD-2002-1748GHSA-c3pr-rr9m-p77p

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows rem…

Published Jun 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

References

http://online.securityfocus.com/advisories/3843
3998 vdb-entry
Q248840 vendor-advisory
20020129 RFP2201: MS Site Server Evilness mailing-list
siteserver-ldap-anonymous-account(8048) vdb-entry