Allaire Security Bulletin (ASB00-25): Microsoft (MS00- 063): Patch Available for Invalid URL Vulnerability
Microsoft has released a patch that eliminates a security vulnerability in
Microsoft(r) Internet Information Server (IIS). The vulnerability could
enable a malicious user to prevent a web server from providing useful
service. This is not a problem with the ColdFusion Server, but it is an issue
that can affect ColdFusion users, as described in the Issue section. Allaire
recommends that customers follow the instructions posted on the
Microsoft Web site to address this issue.
For more info:
Allaire Security Bulletin ASB00-25