• info
• discussion
• exploit
• solution
• references

Windows 2000 Server CVE-2001-0350 Local Security Vulnerability

Windows 2000 Server is prone to a local security vulnerability. Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.