VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2001· Updated Jun 16, 2026

CVE-2001-1517

CVE-2001-1517

Description

RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information

Affected products

3
  • Microsoft/Windows 20003 versions
    cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.