CVE-2000-1200: Medium severity Microsoft Windows NT vulnerability
Published Aug 31, 2001
·Updated
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Affected Software
7 affected components
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp5
Remediation
Patch Available
Event History
Aug 31, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1200?
CVE-2000-1200 is considered high severity as it allows remote attackers to enumerate users in a domain.
2
How do I fix CVE-2000-1200?
To fix CVE-2000-1200, you should disable null session access on your Windows NT systems.
3
What operating systems are affected by CVE-2000-1200?
CVE-2000-1200 affects various versions of Microsoft Windows NT 4.0, including all service packs.
4
Can CVE-2000-1200 be exploited remotely?
Yes, CVE-2000-1200 can be exploited remotely, allowing attackers to list domain users without direct access.
5
What kind of information can be obtained through CVE-2000-1200?
CVE-2000-1200 allows attackers to obtain the domain security identifier (SID) and list all users in the domain.