CVE-2000-1200

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*

History

20 Nov 2024, 23:34

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/44430 - Vendor Advisory () http://www.securityfocus.com/archive/1/44430 - Vendor Advisory
References () http://www.securityfocus.com/bid/959 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/959 - Exploit, Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/4015 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/4015 -

Information

Published : 2001-08-31 04:00

Updated : 2024-11-20 23:34


NVD link : CVE-2000-1200

Mitre link : CVE-2000-1200

CVE.ORG link : CVE-2000-1200


JSON object : View

Products Affected

microsoft

  • windows_nt