case sesitivity vulnerability in winnt

[Paul Howell]

At http://www.cybermedia.co.in/NT_Security/CS_vulnerability.htm
is a description of a vulnerability in WinNT.  

Here is a brief description of the problem:

Description: 
 Using the permissions on the "\??" object directory and by exploiting the 
 case sensitivity of object manager it is possible to trojan any system 
 executables. 
        

The site also has example code.  I have not tried it. 

< paul