CVE-2002-0697

Critical

Description

Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.

SeverityCritical

CVSS10.0

Exploit probability—

Product

Microsoft Metadirectory Services

PublishedAug 12, 2002

First seenAug 12, 2002

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036

Affected products

Product	Affected versions	Fixed in
microsoft metadirectory_services	2.2	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.