- home
- reviews
- news
- downloads
- cnet tv
HOLIDAY HELP DESK: Broadcasting live at 1:00 p.m., PT
- log in
- join CNET
- welcome,
- my profile
- log out

Comments on: Microsoft warns of new server vulnerability

Software maker says an unpatched flaw in its Web-serving software could offer a hole for malicious code to attack systems.

Add a Comment (Log in or register) (12 Comments)

by monkeyfun14 May 18, 2009 8:17 PM PDT

Why the hell mention a vulnerability that no one is exploiting before you have a patch to fix it.

Like this Reply to this comment


by boyd087 May 18, 2009 8:41 PM PDT: Why not? If the vulnerability has been publicized to any extent, then it's worthwhile to spread the word so that system administrators about a potential vulnerability and ways to mitigate risk. Instead of waiting for an exploit that uses a vulnerability, be proactive.

On the other hand, I would think/hope that this vulnerability would not impact most IIS configurations. Generally, it's probably good form to keep file system ACLs enforced and limit the IIS anonymous user account to read-only access on the IIS folder structure. Are there any major web applications that live on IIS that require this (and I'm asking because I'm not sure)? Additionally, there are probably a lot of IIS servers out there that don't even have WebDAV turned on. Also, it looks like IIS7 (Server 2008/Vista) isn't affected.; Like this

by johnwbaxter--2008 May 18, 2009 8:36 PM PDT

How could there possibly be a vulnerability in IIS!? There must be some mistake.

Like this Reply to this comment


by dhavleak May 19, 2009 12:05 AM PDT: Not sure what you're implying there.; Like this


by slickuser May 18, 2009 9:37 PM PDT: keep them coming!; Like this Reply to this comment


by Outside_Looking_In May 18, 2009 10:06 PM PDT: Oh, no! Not another vulnerability in another Microsoft product! It's all lies! All lies I tell you!; Like this Reply to this comment


by Angmarr May 18, 2009 10:09 PM PDT: very informative; Like this Reply to this comment


by The_happy_switcher May 18, 2009 10:48 PM PDT: Wow, and it's not even Tuesday yet.; Like this Reply to this comment

by gertruded May 19, 2009 4:01 AM PDT

It must be some mistake, there has already been one hole revealed today. Isn't Windows wonderful?

Like this Reply to this comment


by wolivere May 19, 2009 4:48 AM PDT: All OS's have them, http://www.ubuntu.com/usn; Like this


by 3rdalbum May 19, 2009 4:58 AM PDT: I'll buck the trend and say good on Microsoft for issuing a timely security advisory before anyone is affected by the problem.; Like this Reply to this comment


by ExWinUser May 19, 2009 7:14 AM PDT: Now my Microsoft Certifications are worthless again!; Like this Reply to this comment

(12 Comments)

About Beyond Binary

During her years at CNET News, Ina Fried has changed beats several times, changed genders once, and covered both of the Pirates of Silicon Valley. These days, most of her attention is focused on Microsoft.

Beyond Binary is a look at how technology is changing our lives and the people behind all that life-changing stuff, with an extra emphasis on that which emanates from Redmond, Wash.