CVE-2000-0737: Microsoft Windows 2000

Medium severity, CVSS 4.6. EPSS: 4.4% chance of exploitation in the next 30 days.

The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability.

Affected products

• Microsoft Windows 2000: any version

Published 2000-10-20. Last modified 2026-06-16.