Windows 2000 IIS5 Security Patch: IIS Cross-Site Scripting Vulnerability

On August 25, 2000, Microsoft released the original version of this bulletin, to advise customers of the availability of a patch that eliminates a vulnerability in Microsoft Internet Information Server.

However, an additional variant of the vulnerability was subsequently identified, and on October 30, 2000, the bulletin was updated to advise customers of the availability of an updated patch.The updated patch eliminates all known variants of the vulnerability. This version is the first release on CNET Download.com.