Microsoft close security hole in windows 2000 server

Do they ever learn by microsoft??

Microsoft Corp. Tuesday disclosed that an "extremely serious" flaw in an extension included in Windows 2000 could allow a malicious hacker to gain complete control of any computer running the Internet Information Services (IIS) 5.0 software built into that operating system.

In a bulletin posted on its Web site, Microsoft said the vulnerability is caused by an unchecked buffer in an extension that provides native support for Internet printing capabilities within Windows 2000. The software vendor "strongly" urged all IIS 5.0 users to install a new patch that's supposed to fix the problem.

More info about this problem
here and this company eEye Digital Security
They found the bug in the software.[

My guess microsoft never learns!!

Source: Itworld.com

No posts to display