CVE-2002-0720: A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privi...

Security readout for executives and security teams

This is a legacy Windows 2000 local privilege escalation issue. A user already on the machine could abuse the Network Connection Manager handling path so attacker-controlled code runs as LocalSystem. The business risk is mainly from old, still-running Windows 2000 systems where a low-privilege account could become full system compromise. Exposure appears limited to Windows 2000 systems using the affected Network Connection Manager component. Evidence does not identify other Windows versions or products. Any remaining Windows 2000 host should be treated as high-risk due to unsupported legacy status and LocalSystem impact. Prioritize remediation if Windows 2000 still exists anywhere in the environment. This is not a modern internet-scale exposure based on the provided evidence, but any remaining affected host could let a low-privilege local user gain full system control. Mitigation focus: Review Microsoft MS02-042 for the vendor-approved remediation path.; Confirm all Windows 2000 systems have the relevant Microsoft security update or are decommissioned.; Restrict local and interactive access to any remaining Windows 2000 hosts..

Prepared

Jun 30, 2026, 12:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.