Relative Shell Path Vulnerability

CVE-2000-0663 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability.

Learn more about our User Device Pen Test.