CVE-2004-0540: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days.

Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.

Affected products

• Microsoft Windows 2000: any version

Published 2004-08-06. Last modified 2026-06-16.