Unscored CVE-2000-1200 EUVD-2000-1185GHSA-pcqx-qgqf-w5jw

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy func…

Published Mar 9, 2002 · Updated Oct 9, 2026 · Assigned by mitre

Description

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

References

20000201 Windows NT and account list leak ! A new SID usage mailing-list
nt-lsa-domain-sid(4015) vdb-entry
959 vdb-entry