Login Request a demo
Unscored severity · published Nov 12, 2002
CVE-2002-0869
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing…
–
CVSS
23.6%
EPSS
No
On KEV
Description
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
Exploitation
Is it being used?
Exploit prediction (EPSS)23.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Internet Information Server · Microsoft
4.0 · source: NVD
II
Internet Information Services · Microsoft
5.0 · source: NVD
Affected product
II
Internet Information Server
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0869
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0869
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html
marc.info
http://marc.info/?l=bugtraq&m=103642839205574&w=2
www.ciac.org
http://www.ciac.org/ciac/bulletins/n-011.shtml
Patch
http://www.iss.net/security_center/static/10502.php
www.li0n.pe.kr
http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062
More from Internet Information Server
7.5
CVE-2001-0334
FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded
7.5
CVE-2000-0258
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters"…
7.0
CVE-1999-0012
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names
–
CVE-2010-1899
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of…
–
CVE-2010-1256
Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code…