L0pht Security has issued an update to its advisory: Web users can view ASP source code and other sensitive files on the Microsoft IIS 4.0 web server.
L0pht Security Advisory