otherwise COM_CHANGE_USER is unprotected and can be used for both privilege escalation and buffer overrun
Attach a file by drag & drop or click to upload