PoC for local elevation of privilege on Windows 2000 SP4 upwards (NEW)(SANS)
Windows2000以降のCSRSSにローカル権限が昇格する脆弱性があるとのこと。
It targets the Client Server Run-Time Subsystem. The blog states that initial indications are that you need to be authenticated before you can take advantage of it. It affects Windows 2000 SP4, Windows Server 2003 SP1, Windows XP SP1, Windows XP SP2 and Windows Vista.