medium5.0
CVE-2000-1200
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null sess…
Impact
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Nt | Version 4.0 |