CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2002-03677.8/HIGHEPSS 4.9%CISA KEV
2002-06-25

Windows NT and 2000 smss.exe Debugging Subsystem Local Privilege Escalation (CVE-2002-0367, DebPloit)

[Affected Scope] Windows NT 4.0 and Windows 2000 operating systems

[Impact] Local attackers can exploit authentication flaws in the smss.exe debugging subsystem to duplicate privileged process handles and gain SYSTEM privileges

[Mitigation] Apply legacy security patches immediately, restrict local debug privileges, and migrate to supported modern operating systems

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse