CVE-2001-1238

HIGH

Windows 2000 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

Scores

CVSS v3 7.8
EPSS 0.0051
EPSS Percentile 66.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-178
Status published
Products (1)
microsoft/windows_2000
Published Jul 16, 2001
Tracked Since Feb 18, 2026