================= VERISIGN - THE INTERNET TRUST COMPANY ================= Upgrade your server security to 128-bit SSL encryption! Get VeriSign's FREE guide, "Securing Your Web Site for Business." You will learn everything you need to know about using 128-bit SSL to encrypt your e-commerce transactions for serious online security. Click here! http://www.verisign.com/cgi-bin/go.cgi?a=n046607850014000 ========================================================================= April 12, 2000 - Vanja Hrustic reported a problem with IIS 4.0 and 5.0 that could allow minor temporary denial of service attacks to be launched against its Web services. By sending IIS a specially coded URL that contains an excessive number of escape characters, the service is caused to perform more work than necessary, which can temporarily reduce available processor cycles. The Microsoft has released a patches for IIS as well as a FAQ. An associated Support Online was not avialable at the time of this writing. For complete details on this risk, please visit the URL below: * Excessive Escape Chars Can Slow IIS http://www.ntsecurity.net/go/load.asp?iD=/security/iis4-8.htm Thanks for subscribing to Security UPDATE. Please tell your friends about this newsletter and alert list! Sincerely, The Security UPDATE Team security@ntsecurity.net To subscribe, go to the UPDATE home page at http://www.win2000mag.com/update or send a blank email to join-securityupdate@list.win2000mag.net. To remove yourself from the list, send a blank email to leave-securityupdate-120275L@list.win2000mag.net. To change your email address, send a message with the sentence set securityupdate email="new email address" as the message text to securityupdate@list.win2000mag.net. Replace the words "new email address" with your new email address (include the quotes). If you have questions or problems with your UPDATE subscription, please contact securityupdate@win2000mag.com. We will address your questions or problems as quickly as we can, but please allow 2 issues for resolution. |-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-|-+-| Copyright 2000, Windows 2000 Magazine