Every CVE Search/ Get API key

CVE-2002-1769

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default...

7.5 High

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Exploit likelihood

11.7%Down 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Record
CVE-2002-1769
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Record
CVE-2002-1769
Updated
2026-11-02
EUVDEUVD-2002-1748 No score

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Record
EUVD-2002-1748
Updated
2026-11-03
GitHub AdvisoriesGHSA-c3pr-rr9m-p77p No score

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default...

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Record
GHSA-c3pr-rr9m-p77p
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1769 is a high vulnerability (CVSS 7.5) in Microsoft Site Server, published December 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.7%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open