CVE-2002-0869 | BDVDB-2026-4770 Detail
Description#
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929
- http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt
- http://marc.info/?l=bugtraq&m=103642839205574&w=2
- http://www.iss.net/security_center/static/10502.php
- http://www.ciac.org/ciac/bulletins/n-011.shtml
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.