Get real-time updates on Telegram
CVE-2000-1200: windows nt 4.0; +1 more affected products
CVE-2000-1200. CVSS 2.0 base score 5.0 (MEDIUM, NVD). EPSS 0.481 (percentile 0.9883), scored 2026-10-08.
Affected technology
windows nt · 4.0
microsoft
windows nt · 4.0 · update sp1
microsoft
windows nt · 4.0 · update sp2
microsoft
windows nt · 4.0 · update sp3
microsoft
windows nt · 4.0 · update sp4
microsoft
windows nt · 4.0 · update sp5
microsoft
windows nt · 4.0 · update sp6
microsoft
n/a · n/a
Vendor not specified by the source
Component: Not specified by the source
Function: via
Attack conditions (NVD, CVSS 2.0): Network (remote)
What an attacker can do
Remote attackers can list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. NVD’s CVSS 2.0 assessment (base score 5.0/10) rates confidentiality impact as partial; integrity and availability impact as none.
- CCR priority
- 32.0 /100 (P4)
- CVSS 2.0
- 5.0 /10 · CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N · NVD
- EPSS
- 0.481 · percentile 0.98831 · 2026-10-09
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-09 21:11:27.988868+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-09 21:08:49.498434+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2000-1200.html