CVE-2002-0367

Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2002-0367
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-0364
• http://www.securityfocus.com/archive/1/264441
• http://marc.info/?l=ntbugtraq&m=101614320402695&w=2
• http://www.securityfocus.com/bid/4287
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024
• http://www.securityfocus.com/archive/1/264927
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76
• http://www.securityfocus.com/archive/1/262074
• http://www.iss.net/security_center/static/8462.php
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158