Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | CVE-2002-0367 | 25 Jun 200200:00 | – | attackerkb |
 | CVE-2002-0367 | 14 Jun 202321:10 | – | circl |
 | Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 202200:00 | – | cisa_kev |
 | CVE-2002-0367 | 2 Apr 200305:00 | – | cve |
 | CVE-2002-0367 | 2 Apr 200305:00 | – | cvelist |
 | EUVD-2002-0364 | 7 Oct 202500:30 | – | euvd |
 | CISA list of 95 new known exploited vulnerabilities raises questions | 14 Mar 202211:18 | – | malwarebytes |
 | CVE-2002-0367 | 25 Jun 200204:00 | – | nvd |
 | Windows Debugger flaw can Lead to Elevated Privileges (Q320206) | 3 Nov 200500:00 | – | openvas |
| Windows Debugger flaw can Lead to Elevated Privileges (Q320206) | 3 Nov 200500:00 | – | openvas |
10
source: https://www.securityfocus.com/bid/4287/info
A vulnerability in Microsoft Windows 2000 and NT 4 could allow a user to gain SYSTEM-level privileges on the local host.
The debugging subsystem, which is available to all users, may be used to create duplicate handles to a privileged process. This may allow an application with minimal privileges to execute arbitrary code with the privileges of the process that is accessed.
05/06/2002: There have been reports of a mass-mailing worm that exploits this vulnerability using the proof-of-concept exploit.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21344.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Sep 2012 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 27.2
CVSS 3.17.8
EPSS0.04879
SSVC