Description
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
References
- 20000313 AT Jobs - Denial of serice/Privilege Elevation mailing-list
- 1050 vdb-entry