Please note that http://www.ngssoftware.com/vna/ms-iishtr.txt is the same issue as discovered by Riley Hassell of Eeye. By applying the patch found at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ bulletin/MS02-028.asp will ensure that you are protected if the .HTR ISAPI filter is enabled. Regards Mark Litchfield www.ngssoftware.com Tel: +44 208 40 100 70
