Slashdot Mirror

← Back to Stories (view on slashdot.org)

Eight New Security Holes in IIS

Posted by timothy on from the nobody's-perfect dept.

TedCheshireAcad writes: "A story at the Register asserts that MS's 'Trustworthy Computing' campaign has failed once again, with eight new IIS vulnerabilities discovered. The vulnerabilities include such delights as a buffer overflow in the ASP ISAPI filter, improper HTTP header handling, FrontPage Server Extensions problems and more goodies. Both IIS 4 and 5 are vulnerable. Thanks to eEye and @Stake for their advisories here(1) and here(2)."

1 of 46 comments (clear)

  1. Re:MS found these bugs first! by Perdo · · Score: 1, Flamebait

    All of this is evidence that they are finally getting their house in order.

    You admit that microsoft's house was out of order. And by using the word "getting" you imply that they are not there yet. All while the alternative's houses are in order...

    So why bother with IIS?

    --

    If voting were effective, it would be illegal by now.