1. CVE-Search
  2. CVE-2002-0869
ID CVE-2002-0869
Summary Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 23-11-2020 - 19:49)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
oval via4
  • accepted 2007-08-02T14:47:16.571-04:00
    class vulnerability
    contributors
    • name Christine Walzer
      organization The MITRE Corporation
    • name Robert L. Hollis
      organization ThreatGuard, Inc.
    description Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
    family windows
    id oval:org.mitre.oval:def:929
    status accepted
    submitted 2004-05-12T12:00:00.000-04:00
    title Windows NT IIS Out of Process Privilege Elevation Vulnerability
    version 28
  • accepted 2005-02-16T12:00:00.000-04:00
    class vulnerability
    contributors
    • name Christine Walzer
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    description Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
    family windows
    id oval:org.mitre.oval:def:930
    status accepted
    submitted 2004-05-12T12:00:00.000-04:00
    title Windows 2000 IIS Out of Process Privilege Elevation Vulnerability
    version 65
  • accepted 2007-08-02T14:47:16.863-04:00
    class vulnerability
    contributors
    • name Christine Walzer
      organization The MITRE Corporation
    • name Robert L. Hollis
      organization ThreatGuard, Inc.
    description Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
    family windows
    id oval:org.mitre.oval:def:983
    status accepted
    submitted 2004-05-19T12:00:00.000-04:00
    title Windows XP IIS Out of Process Privilege Elevation Vulnerability
    version 28
refmap via4
bugtraq 20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)
ciac N-011
misc http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt
vulnwatch 20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)
xf iis-outofprocess-privilege-elevation(10502)
Last major update 23-11-2020 - 19:49
Published 12-11-2002 - 05:00
Last modified 23-11-2020 - 19:49
Back to Top