NVD

Id
79375  
Name
CVE-2002-0367  
Description
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-06-25  
Modified Date
2016-10-17  
Seq
2002-0367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
396035 79375 CVE-2002-0367 20020314 DebPloit (exploit)  View
396036 79375 CVE-2002-0367 oval:org.mitre.oval:def:158  View
396037 79375 CVE-2002-0367 oval:org.mitre.oval:def:76  View
396038 79375 CVE-2002-0367 win-debug-duplicate-handles(8462)  View
396039 79375 CVE-2002-0367 MS02-024  View
396040 79375 CVE-2002-0367 20020314 Fwd: DebPloit (exploit)  View
396041 79375 CVE-2002-0367 20020326 Re: DebPloit (exploit)  View
396042 79375 CVE-2002-0367 20020327 Local Security Vulnerability in Windows NT and Windows 2000  View
396043 79375 CVE-2002-0367 4287  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63783 JVNDB-2002-000110 Microsoft Windows のデバッギング機能における権限昇格の脆弱性 Microsoft Windows の デバッギング機能において、デバッギング機能へアクセスする際の認証メカニズムに問題があり、システム上で動作するプログラムに対して、不正なプログラムが実行される脆弱性が存在します。 CVE-2002-0367 4759 CVE-2002-0367 79375 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000110.html 2002-05-13 2007-04-01 View