Network World Fusion schrijft dat de Taiwanese Microsoft site afgelopen woensdag door een hackertje werd gede-faced. De hacker maakte waarschijnlijk gebruik van een bekende exploit in Remote Data Server, die niet dicht gepatched bleek te zijn op de server van Microsoft Taiwan (thanks wildhagen voor de tip):
On Wednesday, an unknown attacker broke into Microsoft's Web server for public information in Taiwan, leaving the message: "Hi, Bill, welcome to the real Y2K bug."The hacker, who signed himself as "inferno.vr," apparently exploited a known Web server vulnerability in the Microsoft Internet Information Server that hadn't been fixed. The server has hosted at the Taiwanese company, AUNET, a Microsoft spokesman says.
[...] Still investigating the incident, Microsoft believes at this point that the hacker exploited a hole in Microsoft's Remote Data Server software used to let Web developers update information to the Microsoft Web server, IIS.
"We patched this back in July '98, and then again reminded customers in July '99 to install the patch," Sohn says. Ironically, the Web server on which Microsoft kept its own information in Taiwan hadn't been fixed.
