CVE

Id
5259  
CVE No.
CVE-2002-0869  
Status
Candidate  
Description
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Cole, Green, Wall | NOOP(1) Cox  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28127 5259 CVE-2002-0869 MISC:http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt  View
28128 5259 CVE-2002-0869 VULNWATCH:20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)  View
28129 5259 CVE-2002-0869 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html  View
28130 5259 CVE-2002-0869 BUGTRAQ:20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)  View
28131 5259 CVE-2002-0869 URL:http://marc.info/?l=bugtraq&m=103642839205574&w=2  View
28132 5259 CVE-2002-0869 MS:MS02-062  View
28133 5259 CVE-2002-0869 URL:http://www.microsoft.com/technet/security/bulletin/ms02-062.asp  View
28134 5259 CVE-2002-0869 CIAC:N-011  View
28135 5259 CVE-2002-0869 URL:http://www.ciac.org/ciac/bulletins/n-011.shtml  View
28136 5259 CVE-2002-0869 OVAL:oval:org.mitre.oval:def:929  View
28137 5259 CVE-2002-0869 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:929  View
28138 5259 CVE-2002-0869 OVAL:oval:org.mitre.oval:def:930  View
28139 5259 CVE-2002-0869 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:930  View
28140 5259 CVE-2002-0869 OVAL:oval:org.mitre.oval:def:983  View
28141 5259 CVE-2002-0869 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:983  View
28142 5259 CVE-2002-0869 XF:iis-outofprocess-privilege-elevation(10502)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63936 JVNDB-2002-000263 Microsoft IIS の異なるアプリケーションプロセスにおける権限取得の脆弱性 Microsoft IIS において、IIS とは異なるプロセスの一部としてアプリケーションを実行する場合に、通常は Web アプリケーションマネージャの権限で実行されるべきはずのものが System 権限で実行されてしまう設計上の不備が存在します。 CVE-2002-0869 5259 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000263.html  View