News

IIS Cumulative Patch Released

Microsoft Corp. issued a cumulative patch this week for its Internet Information Services Web server that fixes four critical new vulnerabilities and six other newly discovered bugs.

It is the largest collections of new bug fixes for IIS outside of a service pack in the last two years. The last cumulative patch for IIS was in August and fixed five flaws. A May 2001 cumulative patch rollup fixed three problems.

As a cumulative patch, the fix also includes all previously released fixes for the standalone IIS 4.0; IIS 5.0, which ships in Windows 2000; and IIS 5.1, which ships in Windows XP Professional Edition. Microsoft says it didn't include Windows .NET Server's IIS 6.0 in the general patch because it is a beta product and is not intended for production use. Microsoft was sending fixes directly to the limited number of customers officially running IIS 6.0 in production environments.

The security bulletin and patch are available at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-018.asp.

All four of the critical flaws involve buffer overflows. The other problems involve cross-site scripting, a denial of service via an FTP status request and an access violation in URL error handling.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

  • Microsoft Brings Copilot AI Into Viva Engage

    Microsoft 365 Copilot in Viva Engage is now generally available, extending Copilot's AI-powered assistant capabilities deeper into the Viva platform.

Most   Popular