Hurts when you shoot yourself in the foot...
They (like anyone running IIS) should probably think about a full time
staffer to monitor and apply patches to IIS. Or maybe a team of people
given the sheer volume of the task...
Carric Dooley
Senior Consultant
COM2:Interactive Media
"But this one goes to eleven."
-- Nigel Tufnel
On Tue, 5 Dec 2000, Ken Hardy wrote:
> I saw something on some list or other that said that the NAI
> Brazil site was hacked through bugs in IIS. No firewall will
> protect against in-band attacks like that. However, whereas
> their products may be off the hook, their security procedures
> are not; there is an available patch from MS that fixes the IIS
> bug that was exploited, but they had not applied the fix.
>
> --
> KH
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
