Microsoft confirmed yesterday that there is a bug in the company’s web server IIS 6. According to the Microsoft security risk is minimal since it requires that the server is configured in a special way for the security hole to be exploited. In a security bulletin that Microsoft released yesterday …

Now all hosting companies offering IIS and SQL Server on Windows XP, 2003, Vista, and Server 2008 must watch out for a vulnerability allowing local users to raise his privilege level. Microsoft stated in their advisory: Hosting providers may be at increased risk from this elevation of privilege vulnerability. But …