CVE-2000-0197
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Date published : 2000-03-22
http://www.securityfocus.com/bid/1050
http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html