Microsoft races to plug Web security hole
Microsoft Alert
Microsoft Security Bulletin MS01-023: Unchecked Buffer in ISAPI Extension Could Enable Compromise of IIS 5.0 Server
Microsoft Security Bulletin
Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access):
Microsoft Alert
"As I undertand it you have to remove .printer. But I know you all did this when you removed .htr. ColdFusion's docs also suggest [that] all but the known and used extensions should be removed."