What is the severity of CVE-2000-1200?

CVE-2000-1200 is considered high severity as it allows remote attackers to enumerate users in a domain.

How do I fix CVE-2000-1200?

To fix CVE-2000-1200, you should disable null session access on your Windows NT systems.

What operating systems are affected by CVE-2000-1200?

CVE-2000-1200 affects various versions of Microsoft Windows NT 4.0, including all service packs.

Can CVE-2000-1200 be exploited remotely?

Yes, CVE-2000-1200 can be exploited remotely, allowing attackers to list domain users without direct access.

What kind of information can be obtained through CVE-2000-1200?

CVE-2000-1200 allows attackers to obtain the domain security identifier (SID) and list all users in the domain.

Vulnerability/
CVE-2000-1200

medium

CWE

NVD-CWE-Other

31/8/2001

10/10/2017

CVE-2000-1200

First published: Fri Aug 31 2001(Updated: )

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Windows NT	=4.0
Microsoft Windows NT	=4.0-sp2
Microsoft Windows NT	=4.0-sp1
Microsoft Windows NT	=4.0-sp4
Microsoft Windows NT	=4.0-sp6
Microsoft Windows NT	=4.0-sp3
Microsoft Windows NT	=4.0-sp5

Remedy

http://www.securityfocus.com/bid/959

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2000-1200?
CVE-2000-1200 is considered high severity as it allows remote attackers to enumerate users in a domain.
How do I fix CVE-2000-1200?
To fix CVE-2000-1200, you should disable null session access on your Windows NT systems.
What operating systems are affected by CVE-2000-1200?
CVE-2000-1200 affects various versions of Microsoft Windows NT 4.0, including all service packs.
Can CVE-2000-1200 be exploited remotely?
Yes, CVE-2000-1200 can be exploited remotely, allowing attackers to list domain users without direct access.
What kind of information can be obtained through CVE-2000-1200?
CVE-2000-1200 allows attackers to obtain the domain security identifier (SID) and list all users in the domain.

agent/weakness
agent/severity
agent/references
agent/remedy
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/event
agent/author
agent/type
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
agent/description
vendor/microsoft
canonical/microsoft windows nt
version/microsoft windows nt/4.0
version/microsoft windows nt/4.0-sp2
version/microsoft windows nt/4.0-sp1
version/microsoft windows nt/4.0-sp4
version/microsoft windows nt/4.0-sp6
version/microsoft windows nt/4.0-sp3
version/microsoft windows nt/4.0-sp5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.