Mar 2003. IIS 5.0 is swiss cheese again.(Link with patch nfo

[duhmez 0]

Buffer overflow, arbitrary code execution. You know the drill, grab this patch real quick. Hack tools to exploit this ae already on the web.

 

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-007.asp

[clutch 1]

Just remember, anybody using URLScan in its default configuration is immune to this (and all the other attacks of this nature) attack. If you are new to using a Windows 2000 server, get this installed *FIRST*, then start working your way to adjusting the server to your needs.