Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- http://www.securityfocus.com/archive/1/44430 Vendor Advisory
- http://www.securityfocus.com/bid/959 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/44430 Vendor Advisory
- http://www.securityfocus.com/bid/959 Exploit, Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.0 · microsoftNVD modified 2026-10-09 19:16
Affected (CPE criteria) 7
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*
References 6
- http://www.securityfocus.com/archive/1/44430 Vendor Advisory
- http://www.securityfocus.com/bid/959 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4015
- http://www.securityfocus.com/archive/1/44430 Vendor Advisory
- http://www.securityfocus.com/bid/959 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4015