Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batch file that specifies this password in the /password switch and specifies an arbitrary program in the /command switch.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lsrunase | Moernaut | 1.0 (including) | 1.0 (including) |
| Supercrypt | Moernaut | 1.0 (including) | 1.0 (including) |