Alert, Microsoft Security Bulletin!

Question

A new Microsoft Security Bulletin was issued 6-29-03 that contained a cumulative patch for IIS.

Answer

This question was answered on May 29, 2003. Much of the information contained herein may have changed since posting.

A vulnerability that affects Microsoft IIS was found this last week and a cumulative patch is now available. Only those people who use there computer as a Web server are affected. Microsoft advises these users to update their systems to patch this vulnerability immediately.

Microsoft encourages all customers to review the Security Bulletins to keep optimal security. The risk is considered ‘importantl’ which is the second highest security breach they have. The vulnerability allows the attacker to execute code of his or her choice on the server with user-level permissions.

Download locations for this patch:

The patches for all Windows systems are available via:

Windows Update

The complete technical details are posted at the Microsoft web site:

<a href="http://www.microsoft.com/technet/security/bulletin/MS03-018.asp"> http://www.microsoft.com/technet/security/bulletin/MS03-018.asp</a>

Author

Posted by Michal of Data Doctors on May 29, 2003