CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
Other sources
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0367?
CVE-2002-0367 is considered critical due to its potential for local users to gain elevated privileges.
How do I fix CVE-2002-0367?
To fix CVE-2002-0367, apply the appropriate security patches from Microsoft for affected versions of Windows NT and Windows 2000.
What systems are affected by CVE-2002-0367?
CVE-2002-0367 affects Microsoft Windows NT 4.0 and Microsoft Windows 2000.
What type of vulnerability is CVE-2002-0367?
CVE-2002-0367 is a local privilege escalation vulnerability.
Can CVE-2002-0367 be exploited remotely?
CVE-2002-0367 cannot be exploited remotely as it requires local access to the system.