Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2000-1200
HistoryMar 09, 2002 - 5:00 a.m.

CVE-2000-1200

2002-03-0905:00:00
mitre
web.nvd.nist.gov
405
windows nt
remote attackers
domain users
lsaqueryinformationpolicy
null session
sid
cve-2000-1200
nvd.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.7%

JSON

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

Affected configurations

Nvd
Node
microsoftwindows_ntMatch4.0
OR
microsoftwindows_ntMatch4.0sp1
OR
microsoftwindows_ntMatch4.0sp2
OR
microsoftwindows_ntMatch4.0sp3
OR
microsoftwindows_ntMatch4.0sp4
OR
microsoftwindows_ntMatch4.0sp5
OR
microsoftwindows_ntMatch4.0sp6
VendorProductVersionCPE
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*

Related

cvelist 1
checkpoint_advisories 1
nessus 2
nvd 1
cvelist
cvelist
CVE-2000-1200
2002-03-09 05:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows NT Null CIFS Sessions (CVE-2000-1200)
2006-01-02 00:00:00
nessus
nessus
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials
2011-09-15 00:00:00
SMB Use Host SID to Enumerate Local Users Without Credentials
2011-09-15 00:00:00
nvd
nvd
CVE-2000-1200
2001-08-31 04:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.7%

JSON
Related for CVE-2000-1200
cvelist1checkpoint_advisories1nessus2nvd1