high7.8Known exploitedPublic exploit code
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation2002-03-13 · local · windows · Verified
Impact
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Nt | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://marc.info/?l=ntbugtraq&m=101614320402695&w=2
- http://www.iss.net/security_center/static/8462.php
- http://www.securityfocus.com/archive/1/262074
- http://www.securityfocus.com/archive/1/264441
- http://www.securityfocus.com/archive/1/264927
- http://www.securityfocus.com/bid/4287
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367