CVE-2000-1200
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct
CVSS
5.0
No CVSS
EPSS
48.1%
p99
KEV
—
Exploit Today
30
0-100
Published: Aug 31, 2001 · Last modified: Oct 9, 2026
48.1%EPSS · 30 days48.1%
2026-09-232026-10-20
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
- www.securityfocus.comhttp://www.securityfocus.com/archive/1/44430
- www.securityfocus.comhttp://www.securityfocus.com/bid/959
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/4015
- www.securityfocus.comhttp://www.securityfocus.com/archive/1/44430
- www.securityfocus.comhttp://www.securityfocus.com/bid/959
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/4015
No related CVEs by CWE or product.