PT-2002-1720 · Microsoft · Metadirectory Services

Published 2002-08-12 · Updated 2018-10-12 · CVE-2002-0697

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Metadirectory Services (MMS) version 2.2

Description The issue allows remote attackers to bypass authentication and modify sensitive data. This is achieved by using an LDAP client to directly connect to MMS, thereby bypassing the checks for MMS credentials.

Recommendations For Microsoft Metadirectory Services (MMS) version 2.2, consider restricting direct LDAP connections to MMS as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-0697

Affected Products

Metadirectory Services

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0697 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036 · Vendor Advisory
• http://securityfocus.com/bid/5308 · Note
• http://iss.net/security_center/static/9657.php · Note