A big gaping hole has been found where users who have expired passwords can unexpectedly log on to a Microsoft Windows 2000 domain if their fully qualified domain name (FQDN) is exactly eight characters long. Platforms affected: Microsoft Windows 2000 Advanced Server, Microsoft Windows 2000 Professional, Microsoft Windows 2000 Server.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33457/domainWhoops.txt
Source: https://packetstormsecurity.com/files/33457/domainWhoops.txt.html