CVE-2002-0367
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Windows Privilege Escalation Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 5% (percentile: 92) as of 1 November 2026
- CWE
- CWE-269
Affected products
microsoft: windows 2000; microsoft: windows nt
References
- http://www.iss.net/security_center/static/8462.php Broken LinkPatchVendor Advisory
- http://www.securityfocus.com/archive/1/262074 Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-0… PatchVendor Advisory
- http://www.iss.net/security_center/static/8462.php Broken LinkPatchVendor Advisory
- http://www.securityfocus.com/archive/1/262074 Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-0… PatchVendor Advisory
- http://marc.info/?l=ntbugtraq&m=101614320402695&w=2 Mailing List
- http://www.securityfocus.com/archive/1/264441 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/264927 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/4287 Broken LinkThird Party AdvisoryVDB Entry