CVE-2002-0697: Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sens...

Security readout for executives and security teams

CVE-2002-0697 is an authentication bypass in Microsoft Metadirectory Services 2.2. A remote attacker could connect directly with an LDAP client, avoid MMS credential checks, and modify sensitive directory data. This is mainly a legacy-system risk, but any remaining MMS 2.2 deployment should be treated as a high-priority identity data exposure. Exposure is most likely limited to legacy Microsoft Metadirectory Services 2.2 environments, especially where LDAP access to MMS is reachable from untrusted networks or broad internal segments. Modern environments are unlikely to be affected unless they retain old MMS infrastructure. Prioritize remediation if MMS 2.2 still exists because the issue affects authentication boundaries around identity data. If no MMS 2.2 systems remain, document non-exposure and close as a legacy CVE with periodic inventory confirmation. Mitigation focus: Identify and retire any remaining Microsoft Metadirectory Services 2.2 systems.; Review and apply Microsoft guidance from security bulletin MS02-036.; Restrict LDAP access to MMS systems to trusted administrative networks only..

Prepared

Jun 30, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.