A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
Affected Platforms
Microsoft Windows 2000Microsoft Windows 2000 Terminal Services