ZeroDay Findings
Sign inSign up

Findings

CVE-2002-0367

Microsoft Windows Privilege Escalation Vulnerability

Published Jun 24, 2002 · updated Jun 16, 2026 · microsoft windows 2000

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 24, 2002 · Catalog

    Detected

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe microsoft/windows 2000version unspecified
  • cpe microsoft/windows nt4.0
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2002-0367

    smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

    cisa.gov
  • CVE.orgCVE-2002-0367

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2002-0367

    30-day exploitation probability 4.9%

    first.org
  • Exploit Database21344

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2002-0367

    smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

    nvd.nist.gov

References