CVE-2000-0737

This exploit demonstrates a local privilege escalation vulnerability in Windows 2000 by creating a named pipe with a predictable name before the Service Control Manager (SCM) does, allowing the attacker to impersonate a service running as SYSTEM and dump the SAM database.