PT-2002-1430 · Microsoft · Windows 2000+1

Published 2002-06-25 · Updated 2025-10-22 · CVE-2002-0367

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT and Windows 2000

Description The smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs. This allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

Recommendations For Windows NT and Windows 2000, consider restricting access to the smss.exe debugging subsystem to minimize the risk of exploitation. As a temporary workaround, consider disabling the debugging subsystem until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2002-0367

Affected Products

Windows 2000

Windows Nt

References · 18

• 🔥 https://exploit-db.com/exploits/21344 · Exploit
• 🔥 http://securityfocus.com/archive/1/262074 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0367 · Security Note
• http://iss.net/security_center/static/8462.php · Vendor Advisory
• http://marc.info/?l=ntbugtraq&m=101614320402695&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158 · Note
• https://t.me/cveNotify/139703 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367 · Note
• https://t.me/cvenotify/86397 · Telegram Post
• https://t.me/cveNotify/139780 · Telegram Post
• http://securityfocus.com/bid/4287 · Note
• https://t.me/cvenotify/110387 · Telegram Post
• http://securityfocus.com/archive/1/264927 · Note
• https://t.me/cvenotify/114833 · Telegram Post