medium4.6Public exploit code
CVE-2000-0737
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileg…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows Server 2000 - Named Pipes Predictability2000-08-01 · local · windows · Verified
Impact
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |