The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_2000 | - | - |