CVE-2001-1238

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

• CWE-178

• http://www.securityfocus.com/archive/1/197195Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/3033Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6919Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/197195Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/3033Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6919Third Party Advisory, VDB Entry

Published

Jul 16, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1232GroupWise WebAccess 5.5 with directory indexing enabled allo…
• CVE-2001-1233Netware Enterprise Web Server 5.1 running GroupWise WebAcces…
• CVE-2001-1234Bharat Mediratta Gallery PHP script before 1.2.1 allows remo…
• CVE-2001-1235pSlash PHP script 0.7 and earlier allows remote attackers to…
• CVE-2001-1236myphpPagetool PHP script 0.4.3-1 and earlier allows remote a…
• CVE-2001-1237Phormation PHP script 0.9.1 and earlier allows remote attack…
• CVE-2001-1239PowerNet IX allows remote attackers to cause a denial of ser…
• CVE-2001-1240The default configuration of sudo in Engarde Secure Linux 1.…
• CVE-2001-1241Un-CGI 1.9 and earlier does not verify that a CGI script has…
• CVE-2001-1242Directory traversal vulnerability in Un-CGI 1.9 and earlier …
• CVE-2001-1243Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 …
• CVE-2001-1244Multiple TCP implementations could allow remote attackers to…