CVE-2000-0197
MediumExploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
The Windows NT scheduler uses the drive mapping of the interactive user, allowing a local user to gain privileges by substituting a Trojan horse batch file for the original batch file.
Risk Assessment
This vulnerability may lead to privilege escalation, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to monitor and restrict access to batch files and implement security policies that prevent local users from modifying critical system files.
Original NVD description (English source)
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.