CVE-2002-0869
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information...
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
Exploit likelihood
What each source reports
NVD Score used
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
- Record
CVE-2002-0869- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
- Record
CVE-2002-0869- Updated
- 2026-11-02
EUVDEUVD-2002-0861 No score
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
- Record
EUVD-2002-0861- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vcf2-r78h-5vfw No score
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information...
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
- Record
GHSA-vcf2-r78h-5vfw- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0869 is a high vulnerability (CVSS 7.5) in Microsoft Internet Information Server, published November 2, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 23.6%, the 97th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983
li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt
marc.info?l=bugtraq&m=103642839205574&w=2
iss.net/security_center/static/10502.php
ciac.org/ciac/bulletins/n-011.shtml