{"id":"CVE-2002-0367","kind":"vulnerability","aliases":["CVE-2002-0367"],"related":[],"title":"Microsoft Windows: Microsoft Windows Privilege Escalation Vulnerability","description":"smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.","summary":"The smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to it. A local user can use this to gain administrator or SYSTEM privileges.","severity":"high","cvss":7.8,"epss":0.04919,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Microsoft Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","multi-user-hosts","runtime","windows"],"not_affected_if":["fully-patched-windows"],"how_to_check":null,"fix":"Apply the Microsoft Windows updates per vendor instructions, as CISA requires; the sources do not name the specific patch.","status":"open","published_at":"2002-06-25T04:00:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:22+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T21:26:22Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft Windows updates per vendor instructions, as CISA requires; the sources do not name the specific patch.","reach":"local","impact":"high","summary":"The smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to it. A local user can use this to gain administrator or SYSTEM privileges.","category":"runtime","who_cares":["windows","multi-user-hosts"],"confidence":0.6,"needs_auth":"yes","worst_case":"local user gains SYSTEM or administrator privileges on the Windows machine","analyst_note":"Find the Microsoft advisory and the patch or KB that fixes smss.exe debugging subsystem authentication for CVE-2002-0367, and the affected Windows versions, via the MSRC entry for this CVE.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["fully-patched-windows"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000463,"input_tokens":2839,"output_tokens":359,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0367':10A,13A '-2002':9A,12A '2000':59C 'administr':47B,76C 'allow':71C 'authent':33B,63C 'connect':36B,66C 'cve':8A,11A 'debploit':91C 'debug':25B,52C 'demonstr':89C 'duplic':81C 'escal':6A 'exploit':16B 'gain':46B,75C 'handl':83C 'host':20B 'local':40B,72C 'microsoft':1A,3A,14A,28B 'multi':18B 'multi-user-host':17B 'nt':56C 'privileg':5A,50B,79C,86C 'process':87C 'program':34B,64C,69C 'proper':32B,62C 'runtim':21B 'smss.exe':24B,51C 'subsystem':26B,53C 'system':49B,78C 'use':43B 'user':19B,41B,73C 'vulner':7A 'window':2A,4A,22B,29B,55C,58C 'windows':15A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2002-06-25T04:00:00+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2002-0367","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2002-0367","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:49+00:00","note":null},{"source":"epss","external_id":"CVE-2002-0367","url":"https://api.first.org/data/v1/epss?cve=CVE-2002-0367","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2002-0367","url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367","severity":null,"published_at":"2002-06-25T04:00:00+00:00","modified_at":"2026-06-16T21:57:17+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}