{"schemaVersion":3,"id":"CVE-2002-0367","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft Windows Privilege Escalation Vulnerability","description":"smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.","dates":{"published":"2003-04-02T05:00:00.000Z","modified":"2025-10-22T00:05:57.464Z","reserved":null,"kevAdded":["2022-03-03T00:00:00.000Z"],"kevDue":["2022-03-24T00:00:00.000Z"]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04919,"percentile":0.92034,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.04919},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04919,"percentile":0.92034}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04919,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04919,"percentile":0.92034}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Privilege Escalation Vulnerability","description":"smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367","label":"nvd.nist.gov/vuln/detail/CVE-2002-0367"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Privilege Escalation Vulnerability","description":"smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367","label":"nvd.nist.gov/vuln/detail/CVE-2002-0367"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_FFBBF028D3E3918B","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/archive/1/262074","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"21344","name":"Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation","source":"exploit-database","url":"https://www.exploit-db.com/exploits/21344","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/21344.txt","codes":["CVE-2002-0367","OSVDB-788"]},"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-269","name":"Improper Privilege Management","description":"The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/269.html"}],"affected":[{"vendor":"microsoft","product":"windows_2000","name":"windows 2000","label":"windows_2000","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_2000"},{"vendor":"microsoft","product":"windows_nt","name":"windows nt","label":"windows_nt","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0","eol":null,"hubHref":"/vendor/microsoft/windows_nt"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/archive/1/264441","label":"www.securityfocus.com/archive/1/264441","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=ntbugtraq&m=101614320402695&w=2","label":"marc.info?l=ntbugtraq&m=101614320402695&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource NTBUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/4287","label":"www.securityfocus.com/bid/4287","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","label":"docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","hostname":"docs.microsoft.com","tags":["Vendor Advisory","X Refsource MS","Patch"]},{"url":"http://www.securityfocus.com/archive/1/264927","label":"www.securityfocus.com/archive/1/264927","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/262074","label":"www.securityfocus.com/archive/1/262074","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8462.php","label":"www.iss.net/security_center/static/8462.php","hostname":"www.iss.net","tags":["VDB Entry","X Refsource XF","Broken Link","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2003-04-02T05:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft Windows Privilege Escalation Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-03-24T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-22T00:05:57.464Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T06:40:16.868Z","stale":false,"partial":false}}