There's a Hole in IIS -- Redmondmag.com

Barney's Blog

There's a Hole in IIS

Internet Information Services (IIS) has a big hole, and so far there's no fix -- just a warning. Versions 5 through 6 are vulnerable to an "elevation of privilege" attack.

So far no one has been struck, as far as we know, and there are some things you can do. Make sure your access control lists are disciplined and that those who don't need access don't have it. You can also set up fake admin accounts that don't actually have admin rights. This way an intruder may think he's cracked your system, but can't actually do anything. Pretty clever.

Posted by Doug Barney on 05/20/2009 at 1:16 PM

Featured

Choosing the Right SSID for Your Network

Attracting attention, whether through a default or funny Wi-Fi name, could lead to a security issue.
Microsoft Outlines Latest Security Efforts at Ignite

In the wake of last year's CrowdStrike incident, Microsoft has worked to publicly rehabilitate its security image through new initiatives and public commitments to improve. That push continued this week at Ignite, where Microsoft announced a handful of new security tools and updates.
Nadella on Copilot: 'Major Platform Shifts Are in the Air'

As should be no surprise, Copilot took center stage during Microsoft CEO Satya Nadella's keynote speech to open Microsoft Ignite 2024.
Azure AI Foundry Revealed at Microsoft Ignite

Microsoft is consolidating its Azure generative AI tools into a unified platform named Azure AI Foundry.
Microsoft Bolsters Fabric at Ignite

While Fabric has improved in the year since its release, there are still some glaring issues with the platform.