In yet another combo pack, Microsoft released three security bulletins. The bulletins which are labeled from moderate to critical, deal with Internet Information Service (IIS), Windows 2000 and Windows XP.
Title: Cumulative Patch for Internet Information Service
Description:This patch is a cumulative patch that includes the functionality of all security patches released for IIS 4.0 since Windows NT 4.0 Service Pack 6a, and all security patches released to date for IIS 5.0 and 5.1.
Title: Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks
Description:A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP connections.
Title: Windows 2000 Default Permissions Could Allow Trojan Horse Program
Description:On Windows 2000, the default permissions provide the Everyone group with Full access (Everyone:F) on the system root folder (typically, C:).