Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

References

• https://nvd.nist.gov/vuln/detail/CVE-2001-1238
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6919
• http://www.securityfocus.com/archive/1/197195
• http://www.securityfocus.com/bid/3033