Beveiligingsadvies

CVE-2002-0367

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2003-04-02 05:00:00

Laatst bijgewerkt 2025-10-22 00:05:57

Toegewezen door mitre

CVSS-score 7.8

Status PUBLISHED

Beschrijving

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

← Alle CVE's bekijken Bekijk op cve.org ↗