CVE-2001-1518
Windows 2000 - Denial of Service via RunAs Named Pipe Session
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1518. PoCs published by Camisade.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) condition in the Windows 2000 RunAs service by opening a named pipe session, preventing other clients from connecting. It leverages the secondarylogon pipe to block legitimate access.
Description
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability.
Exploits (1)
This exploit demonstrates a denial-of-service (DoS) condition in the Windows 2000 RunAs service by opening a named pipe session, preventing other clients from connecting. It leverages the secondarylogon pipe to block legitimate access.