CVE-2001-1517

CVE-2001-1517 describes a vulnerability in the RunAs utility (runas.exe) in Microsoft Windows 2000, where authentication credentials could be stored in cleartext memory. This could allow an attacker with local access to potentially retrieve usernames and passwords if they could allocate the same memory page after a RunAs command terminated. The vendor disputed this issue, citing that administrative privileges are already required for exploitation. The vulnerability has a low CVSS score of 2.1, indicating a low severity. Its attack vector is local, requiring an attacker to have access to the affected system, and it only impacts confidentiality. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and no community discussion or media coverage surrounding this CVE.