Today, Microsoft released the following Security Bulletin:
http://www.microsoft.com/technet/sec.../ms04-021.mspx
Microsoft Security Bulletin MS04-021
Security Update for IIS 4.0 (841373)
Issued: July 13, 2004
Version: 1.0
This update resolves a newly-discovered, privately reported vulnerability.
An attacker who successfully exploited this vulnerability could take
complete control of an affected system, including installing programs;
viewing, changing, or deleting data; or creating new accounts that have full
privileges.
Customers should install the update at the earliest opportunity.
Summary
Who should read this document: Customers who use Microsoft® Windows® NT® 4.0
Impact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Important
Recommendation: Customers should install the update at the earliest
opportunity.
Security Update Replacement: None
Caveats: None
Tested Software and Security Update Download Locations:
Affected Software:
..Microsoft Windows NT® Workstation 4.0 Service Pack 6a - Download the update
..Microsoft Windows NT Server 4.0 Service Pack 6a - Download the update