Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1519. PoCs published by Camisade.
AI-analyzed exploit summary This exploit creates a named pipe to intercept credentials sent in cleartext by the Windows 2000 RunAs service. It demonstrates the vulnerability by impersonating the service and capturing user credentials when the service is stopped.
Description
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it
Exploits (1)
This exploit creates a named pipe to intercept credentials sent in cleartext by the Windows 2000 RunAs service. It demonstrates the vulnerability by impersonating the service and capturing user credentials when the service is stopped.