Microsoft has released a Cumulative Patch for Internet Information Services

This patch is a cumulative patch that includes the functionality of all security patches released for IIS 4.0 since Windows NT 4.0 Service Pack 6a, and all security patches released to date for IIS 5.0 and 5.1. A complete listing of the patches superseded by this patch is provided below, in the section titled Additional information about this patch. Before applying the patch, system administrators should take note of the caveats discussed in the same section.

Download