CVE-2002-0367

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2002-06-25

Last modified

2025-10-22

Known exploited (CISA KEV)

since 2022-03-03, action due 2022-03-24: Apply updates per vendor instructions.

Weaknesses

CWE-269

Affected products

• Windows 2000 (Microsoft)
• Windows Nt (Microsoft)

References

• http://marc.info/?l=ntbugtraq&m=101614320402695&w=2
• http://www.iss.net/security_center/static/8462.php
• http://www.securityfocus.com/archive/1/262074
• http://www.securityfocus.com/archive/1/264441
• http://www.securityfocus.com/archive/1/264927
• http://www.securityfocus.com/bid/4287
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367