The exploit works on unpatched Windows 2000 machines with Service Pack 3 and 4.
Both Counterpane and iDefense claim that the exploit is effective against Windows 2000 systems running Service Pack 3 and 4.