Token Kidnapping - Privilege Escalation Win2k3 / Win2k8

Privilege Escalation or "Token Kidnapping" for -
Windows 2003: http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html
Windows 2008: http://nomoreroot.blogspot.com/2008/10/token-kidnapping-windows-2008-poc.html

Check out the other awesomeness he has on his site.