Just fixed a bug in RCE where the RunAs command wasnt working on a Windows 2000 Based System. The problem was with the LogonUser API call which on W2K based systems need an SE_TCB_NAME privilege to execute (which by default is only given to the SYSTEM account). Apparently Microsoft lifted the restriction with XP and Server 2003. More details about the issue can be found here:
The updated release can be found on the sourceforge here:
http://sourceforge.net/project/showfiles.php?group_id=174757
Thanks to Emmanuel for pointing the bug out.









