CVE-2002-0869
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Internet Information Services（IIS）是美国微软（Microsoft）公司的一款适用于Windows Server平台的Web服务器。 Microsoft IIS 服务程序对于进程外运行的应用进程的权限处理上存在漏洞，攻击者可能利用这个漏洞进行权限提升攻击。 默认设置hosting进程(dllhost.exe)一般以IWAM_computername帐户的安全上下文运行，在某些情况下hosting进程可能象IIS ISAPI扩展一样以LocalSystem
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2002-0869
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Internet Information Services 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Information Services（IIS）是美国微软（Microsoft）公司的一款适用于Windows Server平台的Web服务器。 Microsoft IIS 服务程序对于进程外运行的应用进程的权限处理上存在漏洞，攻击者可能利用这个漏洞进行权限提升攻击。 默认设置hosting进程(dllhost.exe)一般以IWAM_computername帐户的安全上下文运行，在某些情况下hosting进程可能象IIS ISAPI扩展一样以LocalSystem
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2002-0869
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2002-0869
请登录查看更多情报信息。
Vendor Advisories for CVE-2002-0869 (5)
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 vendor-advisory x_refsource_MS
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930 vdb-entry signature x_refsource_OVAL
-
Mailing List Discussions for CVE-2002-0869 (2)
-
-
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html mailing-list x_refsource_VULNWATCH
Other References for CVE-2002-0869 (2)
-
http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt x_refsource_MISC
-
http://www.ciac.org/ciac/bulletins/n-011.shtml third-party-advisory government-resource x_refsource_CIAC
IV. Related Vulnerabilities
V. Comments for CVE-2002-0869
No comments yet