CVE-2001-1518 RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authenticati...
LowCVSS 2.1
EPSS 3.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- 20011114 RE:Radix Research Reports RADIX1112200101, RADIX1112200102, and RADIX1112200103 mailing-list
- 20011112 RADIX1112200103 mailing-list
- win2k-runas-dos(7533) vdb-entry
- 3291 exploit vdb-entry