CVE-2002-1769: Microsoft Site Server

High severity, CVSS 7.5. EPSS: 11.7% chance of exploitation in the next 30 days.

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the "Log on locally" privilege.

Affected products

• Microsoft Site Server: version 3.0 only
• Microsoft Site Server Commerce: version 3.0 only

Published 2002-12-31. Last modified 2026-06-16.