CVE-2000-1200: Microsoft Windows Nt

Medium severity, CVSS 5.0. EPSS: 48.1% chance of exploitation in the next 30 days.

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Affected products

• Microsoft Windows Nt: version 4.0 only

Published 2001-08-31. Last modified 2026-10-09.