PT-2002-1882 · Microsoft · Internet Information Server

Published 2002-11-02 · Updated 2020-11-23 · CVE-2002-0869

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Server (IIS) versions 4.0 through 5.1

Description: The issue allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges. This is related to an unknown vulnerability in the hosting process (dllhost.exe).

Recommendations: For Microsoft Internet Information Server (IIS) versions 4.0 through 5.1, consider restricting access to the dllhost.exe process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0869

Affected Products

Internet Information Server

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0869 · Security Note
• http://iss.net/security_center/static/10502.php · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0869 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930 · Note
• http://li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt · Note
• http://marc.info/?l=bugtraq&m=103642839205574&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html · Note
• https://t.me/cvenotify/6034 · Telegram Post
• http://ciac.org/ciac/bulletins/n-011.shtml · Note