NVD

Id
79867  
Name
CVE-2002-0869  
Description
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-11-12  
Modified Date
2016-10-17  
Seq
2002-0869  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398356 79867 CVE-2002-0869 20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)  View
398357 79867 CVE-2002-0869 20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)  View
398358 79867 CVE-2002-0869 oval:org.mitre.oval:def:929  View
398359 79867 CVE-2002-0869 oval:org.mitre.oval:def:930  View
398360 79867 CVE-2002-0869 oval:org.mitre.oval:def:983  View
398361 79867 CVE-2002-0869 N-011  View
398362 79867 CVE-2002-0869 iis-outofprocess-privilege-elevation(10502)  View
398363 79867 CVE-2002-0869 http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt  View
398364 79867 CVE-2002-0869 MS02-062  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63936 JVNDB-2002-000263 Microsoft IIS の異なるアプリケーションプロセスにおける権限取得の脆弱性 Microsoft IIS において、IIS とは異なるプロセスの一部としてアプリケーションを実行する場合に、通常は Web アプリケーションマネージャの権限で実行されるべきはずのものが System 権限で実行されてしまう設計上の不備が存在します。 CVE-2002-0869 5259 CVE-2002-0869 79867 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000263.html 2002-10-30 2007-04-01 View