CVE

Id
4759  
CVE No.
CVE-2002-0367  
Status
Entry  
Description
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23908 4759 CVE-2002-0367 BUGTRAQ:20020314 Fwd: DebPloit (exploit)  View
23909 4759 CVE-2002-0367 URL:http://www.securityfocus.com/archive/1/262074  View
23910 4759 CVE-2002-0367 BUGTRAQ:20020326 Re: DebPloit (exploit)  View
23911 4759 CVE-2002-0367 URL:http://www.securityfocus.com/archive/1/264441  View
23912 4759 CVE-2002-0367 BUGTRAQ:20020327 Local Security Vulnerability in Windows NT and Windows 2000  View
23913 4759 CVE-2002-0367 URL:http://www.securityfocus.com/archive/1/264927  View
23914 4759 CVE-2002-0367 NTBUGTRAQ:20020314 DebPloit (exploit)  View
23915 4759 CVE-2002-0367 URL:http://marc.info/?l=ntbugtraq&m=101614320402695&w=2  View
23916 4759 CVE-2002-0367 BID:4287  View
23917 4759 CVE-2002-0367 URL:http://www.securityfocus.com/bid/4287  View
23918 4759 CVE-2002-0367 XF:win-debug-duplicate-handles(8462)  View
23919 4759 CVE-2002-0367 URL:http://www.iss.net/security_center/static/8462.php  View
23920 4759 CVE-2002-0367 MS:MS02-024  View
23921 4759 CVE-2002-0367 URL:http://www.microsoft.com/technet/security/bulletin/ms02-024.asp  View
23922 4759 CVE-2002-0367 OVAL:oval:org.mitre.oval:def:158  View
23923 4759 CVE-2002-0367 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:158  View
23924 4759 CVE-2002-0367 OVAL:oval:org.mitre.oval:def:76  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63783 JVNDB-2002-000110 Microsoft Windows のデバッギング機能における権限昇格の脆弱性 Microsoft Windows の デバッギング機能において、デバッギング機能へアクセスする際の認証メカニズムに問題があり、システム上で動作するプログラムに対して、不正なプログラムが実行される脆弱性が存在します。 CVE-2002-0367 4759 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000110.html  View