Er zit weer eens een bugje in de webserver van Microsoft, en als ik dit nieuwsbericht zo lees dan gaat 't niet om zomaar een onschuldig kevertje, maar om een groot gat in de beveiliging:
A major security flaw in a Microsoft Web server could allow crackers to take complete control of e-commerce Web sites, security experts warned Tuesday.The flaw in Microsoft's Internet Information Server 4.0 allows unauthorized remote users to gain system-level access to the server, according to Firas Bushnaq, CEO of eEye, the Internet security firm that discovered it.
"This hole is so serious it's scary," said Jim Blake, a network administrator for Irvine, a city in southern California.
"With other [Windows NT] security holes, crackers have needed to gain some level of user access before executing code on the server. This is different.... Anybody off the Web can crack IIS," he said.
