| | Microsoft Security Bulletin (MS00-053) |
 | | The SCM creates a named pipe for each service as it starts, however, should a malicious program predict and create the named pipe for a specific service before the service starts, the program could impersonate the privileges of the service. |
 | | The names assigned to the named pipes are in a predictable sequence and therefore, could allow a malicious user could guess the name of the next instance of a particular service, and create a server-side named pipe for that service. |
 | | As discussed above, the specific function at issue here can only be used to create service named pipes on the local machine, so a malicious user could only use it to attack a machine that he or she can log onto interactively. |
| www.microsoft.com /technet/security/bulletin/ms00-053.mspx (1464 words) |