An old and subsequently well-publicised flaw in Microsoft Internet Information Server (IIS), which allows anyone with a Web browser to gain admin-level access to a server, continues to plague many sites in spite of the availability patches to correct it.

The flaw first became news just over a year ago with a flurry of advisories posted on numerous news sites, and Microsoft did respond and issue a patch. Wired, for example, ran their coverage on 15 June of last year.

Read more