MS02-018

[Dave Ahmad <da () securityfocus com>]

Hey,

Microsoft released a major bulletin this morning covering several serious
vulnerabilities in IIS 4.0, 5.0 and 5.1.  For an unknown reason, Bugtraq
has been unsubscribed from their mailing list several times.  Attached is the
bulletin, intact (originally received as an HTML e-mail).

We have received unconfirmed reports that the patch may break
functionality in some environments.  Has anyone had any problems with
the fixes yet?  For those who have and are replying, please provide your
version and base configuration.

Thank you,

Dave Ahmad
SecurityFocus
www.securityfocus.com

Attachment: ms02-018.txt
Description: