Security 10808 Published by

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Indexing Services for Windows 2000.
This vulnerability could allow a malicious web site operator to
misuse another web site as a means of attacking users.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-084.asp

Affected Software Versions
==========================
- Microsoft Indexing Services for Windows 2000

NOTE: The Indexing Service ships and installs with Windows 2000, but
is not enabled by default. Users who are running web servers on
Windows 2000 who have enabled Indexing Services are urged to apply
this patch.

Patch Availability
==================
- Indexing Services for Windows 2000:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=25517