7.5

CVE-2002-0869

EPSS 29.63%
Veröffentlicht 12.11.2002 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Information Server Version4.0

Microsoft ≫ Internet Information Services Version5.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	29.63%	0.964

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html

http://marc.info/?l=bugtraq&m=103642839205574&w=2

http://www.ciac.org/ciac/bulletins/n-011.shtml

http://www.iss.net/security_center/static/10502.php

Patch

Vendor Advisory

http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983

https://nvd.nist.gov/vuln/detail/CVE-2002-0869

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0869

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0869

EUVD