{"id":"CVE-2002-0367","url":"https://www.cyber-defence.io/tools/cve/CVE-2002-0367","generatedAt":"2026-11-01T00:58:57.121Z","title":"Microsoft Windows Privilege Escalation Vulnerability","description":"smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.","published":"2002-06-25T04:00:00.000Z","lastModified":"2026-06-16T21:57:18.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-269"],"affected":["microsoft/windows 2000","microsoft/windows nt"],"epss":{"score":0.04919,"percentile":0.92106,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2002-0367"},"exploits":{"count":1,"verified":true,"firstPublished":"2002-03-13","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":21344,"kind":"exploit","title":"Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation","url":"https://www.exploit-db.com/exploits/21344","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/21344.txt","file":"exploits/windows/local/21344.txt","published":"2002-03-13","added":"2002-03-13","updated":"2012-09-23","author":"EliCZ","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2002-0367","OSVDB-788"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/4287/info"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 24 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=101614320402695&w=2","tags":["Mailing List"],"source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8462.php","tags":["Broken Link","Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262074","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/264441","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/264927","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4287","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101614320402695&w=2","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8462.php","tags":["Broken Link","Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262074","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/264441","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/264927","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4287","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}