CVE-2000-1200
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 48%
exploitation probability
48%top 1% of all CVEs
observed exploitation
nono source reports it
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Affected products
n/a · n/a