Microsoft Security Bulletin (MS00-057) - Microsoft has released a patch for the "File Permission Canonicalization" vulnerability in Microsoft Internet Information Server. Under some conditions, the vulnerability allows a malicious user to gain additional permissions to certain types of files hosted on a web server. Microsoft FAQ on this issue available here.
2d20ce16ddc4817b524e5d8c15d6ccf43a8f62f3e233a72cf2fdc2ef1e6ab3ac