WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory.
- http://marc.info/?l=bugtraq&m=105848106631132&w=2
No PoCs found on GitHub currently.