Cloudanix VulnDB

CVE-2000-1200

None

CVSS

—

EPSS

48.1%

Published

Aug 31, 2001

CISA due date

—

The record

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Affected packages

Ecosystem Package Introduced Fixed