Good lord, can you believe it?

Yet another urgent bug report has raced out of Microsoft's Redmond campus, warning the world of a rather massive vulnerability in its Microsoft IIS. Once again, the bug-hunters have found a buffer overrun vulnerability, wherein a canny hacker could

Yet another urgent bug report has raced out of Microsoft's Redmond campus, warning the world of a rather massive vulnerability in its Microsoft IIS. Once again, the bug-hunters have found a buffer overrun vulnerability, wherein a canny hacker could (and, frankly, thousands probably already have) gain system-level access to your network, running all kinds of code and messing with file and setup modifications with impunity.

An ISAPI extension called idq.dll is the badboy, thanks to its unbounded buffer. I've lost track of the amount of these vulnerabilities now, and I imagine there are more yet lurking beneath the placid surface of Microsoft's otherwise pristine code. Patches are already available for NT, most species of Windows 2000, and it should even be fixed for the release of XP.

Until next time, then.