Microsoft patches IIS hole

Microsoft Corporation has posted a fix for the serious securityvulnerability in Windows NT 4.0 and Internet Information Server (IIS) thatwas announced earlier this week. The fix eliminates the vulnerability, whichcould allow denial of service attacks against an Windows NT Server runningIIS or, under certain circumstances, allow code to be run on the server. Anunlike the workaround announced earlier this week, the patch is fullysupported.

For more information, and the patch download, please visit the MicrosoftSecurity Web site