CVE-2001-1518

CVE-2001-1518 describes a denial-of-service vulnerability in the RunAs utility (runas.exe) in Microsoft Windows 2000. Local users can exploit this by creating a named pipe session with the authentication server without requesting service, causing RunAs to hang due to its limitation of handling only one session instance at a time. This vulnerability has a low CVSS score of 2.1, indicating a local attack vector with low attack complexity and no authentication required, leading to a partial availability impact. The vendor initially disputed this, but acknowledged a scenario where other users on a Terminal Server could be affected. While there is no evidence of active exploitation, an exploit for this vulnerability is available on ExploitDB (EDB-21099). There is no record of Metasploit or Nuclei modules, and the CVE has received no community discussion or media coverage.