What’s Vulnerable › Vulnerabilities

CVE-2000-1200

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 48.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-08-31 · updated 2026-10-09

Description

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Affected products

• Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+1)

References

• http://www.securityfocus.com/archive/1/44430
• http://www.securityfocus.com/bid/959
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4015
• http://www.securityfocus.com/archive/1/44430
• http://www.securityfocus.com/bid/959
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4015

Get alerted when CVE-2000-1200 or the next vulnerability affects your stack