Microsoft warns of Web server bug

NEWS Microsoft has warned its customers of a bug affecting Internet Information Server 3.0 and 4.0 software. It enables hackers to access sensitive information from behind a Web site on a company's server. The bug occurs when a specific code is attached to the end of an IIS active server page URL. Once the code has been attached, the browser will show script from the server that is not normally seen on the page. The hacker would need to know the name of the file on the Web server that they are trying to access, but once accessed they could cause havoc on a companies Web site. Microsoft has posted a 'hotfix' for both forms of the software on its Web site.