Screaming Penguin - Source Does Matter

Yep as the register puts it "its been a rough 2 weeks for IIS." Well there is another exploit now out that invloves a simple malformed URL and enables the attacker to run arbitrary code outside the webroot, whoops!

This in addition to the .printer and sadmind exploits of late are simply the next in a long line of IIS security issues.
For more info on this latest problem, see the linked register story.

I wont go off on IIS here (again), but suffice to say if you use IIS, get the patches and check for new patches daily (this wont be the last problem.)

Ok, so one little IIS jab, here goes. Want a real patch for IIS, check here: IIS Once and For All Fix All Problems Patch.   IIS Unicode Exploit: theRegister