Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Bug

Serious IIS Hole; Minor X Bug 477

EyesWideOpen writes "Microsoft announced Wednesday that there is a serious software flaw with its IIS web server. The 'vulnerability affects a function in the server software that allows Web administrators to change passwords for an Internet site.' A researcher with eEye Digital Security discovered the flaw in mid-April but it wasn't announced publicly because of an agreement with Microsoft. The Wired article is here and this appears to be the MS bulletin describing the vulnerability in detail." And several people reported this Register story on a way to DOS Mozilla users by trying to display ludicrously large fonts. Microsoft's time to patch a remote hole where the attacker can gain complete access to your computer: two months. Open Source's time to patch a much less serious bug where the attacker can merely crash your computer: three days.
This discussion has been archived. No new comments can be posted.

Serious IIS Hole; Minor X Bug

Comments Filter:

Today is a good day for information-gathering. Read someone else's mail file.

Working...