Security: Dangerous Hole in Windows 2000 and Windows NT Grants Users Full Control

Windows & .net Magazine, 10 April 2002.

"Three weeks after a user discovered and disclosed information about a dangerous security hole in Windows 2000 and Windows NT, Microsoft still hasn't uttered a peep to its customers about the problem. The exploit, known as DebPloit, lets an intruder gain system-level access—-even with the Guest account.

"On March 14, Radim Picha discovered the security flaw and reported it to Microsoft. He then posted a message to the NTBugTraq mailing list about his discovery. Picha's post includes a link to a .zip file that contains complete source code that demonstrates the problem, as well as text files that explain how the exploit works."