Computer Weekly

Microsoft has confirmed that it is investigating reports of a vulnerability in the firm’s Internet Information Services (IIS) software.

The vulnerability that could allow an attacker to take over a server is reported to be in the file transfer function of versions 5.0, 5.1 and 6.0 of Microsoft’s IIS product.

Microsoft said in a security advisory that although detailed exploit code has been published for this vulnerability, the company is not aware of any active attacks.

“Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary,” the advisory said.

Microsoft said that it will take appropriate action, which may include a patch to be released in the next monthly security update or sooner if necessary.

An article to remind us the importance of applying the recommended security patches and hot fixes to protect your infrastructure and prevent unexpected behaviour or exposure to exploits.

Related posts:

  1. Microsoft Security patches for April Microsoft This bulletin summary lists security bulletins released for April...
  2. Microsoft Security patches for August Microsoft Microsoft Security Bulletin Summary for August 2009 Published: August...
  3. Microsoft Security Patches for November announced Microsoft Published: November 10, 2009 Version: 1.0 This bulletin summary...
  4. Microsoft patches for October significant BBC News Microsoft will issue its biggest ever security update...
  5. Microsoft Patches for June 2009 Microsoft Published: June 9, 2009 | Updated: June 10, 2009...

Related posts brought to you by Yet Another Related Posts Plugin.

Bookmark and Share

Leave a Reply