CVE-2000-1200

2001-08-3104:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.7%

JSON

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Affected configurations

Nvd

Node

microsoftwindows_ntMatch4.0

microsoftwindows_ntMatch4.0sp1

microsoftwindows_ntMatch4.0sp2

microsoftwindows_ntMatch4.0sp3

microsoftwindows_ntMatch4.0sp4

microsoftwindows_ntMatch4.0sp5

microsoftwindows_ntMatch4.0sp6

VendorProductVersionCPE
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:::::::*
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp1::::::
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp2::::::
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp3::::::
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp4::::::
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp5::::::
microsoft	windows_nt	4.0	cpe:2.3:o:microsoft:windows_nt:4.0:sp6::::::