CVE-2001-1347
Windows 2000 - Denial of Service and Privilege Escalation via Hardware Breakpoint Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1347. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages a vulnerability in Windows 2000's debug register handling to terminate arbitrary processes without administrative privileges. It specifically targets LSASS.EXE to achieve privilege escalation by impersonating a named pipe client.
Description
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.
Exploits (1)
This exploit leverages a vulnerability in Windows 2000's debug register handling to terminate arbitrary processes without administrative privileges. It specifically targets LSASS.EXE to achieve privilege escalation by impersonating a named pipe client.