Denial of service via directory junction abuse

Denial of service in Microsoft Windows Remote Access Connection Manager allows local users to interrupt the system after low-privilege code execution. The service follows an attacker-created directory junction and creates a directory at the redirected location instead of constraining the path. Exploitation requires code execution on the target; the resulting system denial of service has no more specific published failure mode.