CVE-2001-1519

CVE-2001-1519 describes a named pipe hijacking vulnerability in the RunAs (runas.exe) service of Microsoft Windows 2000. A local attacker could exploit this by creating a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords from connecting clients. The vulnerability has a CVSS score of 3.6 (LOW), indicating a local attack vector with low complexity, primarily impacting confidentiality and integrity. Despite vendor dispute regarding required privileges, public exploit code exists (EDB-21069), though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.