Bladewatch.com

Computer Weekly

Microsoft has confirmed that it is investigating reports of a vulnerability in the firm’s Internet Information Services (IIS) software.

The vulnerability that could allow an attacker to take over a server is reported to be in the file transfer function of versions 5.0, 5.1 and 6.0 of Microsoft’s IIS product.

Microsoft said in a security advisory that although detailed exploit code has been published for this vulnerability, the company is not aware of any active attacks.

“Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary,” the advisory said.

Microsoft said that it will take appropriate action, which may include a patch to be released in the next monthly security update or sooner if necessary.

An article to remind us the importance of applying the recommended security patches and hot fixes to protect your infrastructure and prevent unexpected behaviour or exposure to exploits.

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.