CVE-2000-1200 — Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. — CVE Database · The Intelligence Room