PT-2002-1720 · Microsoft · Metadirectory Services

Publicado 2002-08-12 · Atualizado 2018-10-12 · CVE-2002-0697

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Metadirectory Services (MMS) version 2.2

Description The issue allows remote attackers to bypass authentication and modify sensitive data. This is achieved by using an LDAP client to directly connect to MMS, thereby bypassing the checks for MMS credentials.

Recommendations For Microsoft Metadirectory Services (MMS) version 2.2, consider restricting direct LDAP connections to MMS as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-0697

Produtos afetados

Metadirectory Services

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0697 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036 · Aviso do Fabricante
• http://securityfocus.com/bid/5308 · Nota
• http://iss.net/security_center/static/9657.php · Nota